Lucene search
+L

7328 matches found

CNNVD
CNNVD
added 2022/03/22 12:0 a.m.7 views

ImpressCMS 授权问题漏洞

ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums, and photo albums. ImpressCMS is vulnerable to an access control error that could be exploited by remote attackers to bypass implemented security restrictions and obtain...

5.3CVSS5.6AI score0.10528EPSS
SaveExploits6References10
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.7 views

CVE-2022-22653

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4. A malicious website may be able to access information about the user and their devices...

7.5CVSS7AI score0.01129EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/18 6:15 p.m.7 views

CVE-2022-22650

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...

5.5CVSS6.7AI score0.0025EPSS
SaveExploits0References3
NVD
NVD
added 2022/03/18 6:15 p.m.19 views

CVE-2022-22650

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...

5.5CVSS0.0025EPSS
SaveExploits0References3
Prion
Prion
added 2022/03/18 6:15 p.m.17 views

Design/Logic Flaw

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...

2.1CVSS5.7AI score0.0025EPSS
SaveExploits0References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.6 views

CVE-2022-22650

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...

5.5CVSS6.7AI score0.0025EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/03/18 5:59 p.m.34 views

CVE-2022-22650

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...

6.3AI score0.0025EPSS
SaveExploits0References3
CVE
CVE
added 2022/03/18 5:59 p.m.107 views

CVE-2022-22650

CVE-2022-22650 affects macOS, where a plug-in may inherit the host application's permissions and access user data. The issue is addressed by fixes in macOS Big Sur 11.6.5, macOS Monterey 12.3, and Security Update 2022-003 Catalina; it is resolved by the improved checks. No exploitation details ar...

5.5CVSS5.6AI score0.0025EPSS
SaveExploits0References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/03/18 4:15 p.m.8 views

CVE-2022-24637

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '...

9.8CVSS7.3AI score0.99055EPSS
SaveExploits14References7
CNNVD
CNNVD
added 2022/03/18 12:0 a.m.5 views

Open Web Analytics Server 安全漏洞

Open Web Analytics Server is an open source alternative for commercial web analytics tools such as Google Analytics. A security vulnerability exists in Open Web Analytics version 1.7.4, which stems from the use of php-generated files instead of the expected php sequences that are not processed by...

9.8CVSS8.2AI score0.99055EPSS
SaveExploits14References8
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.12 views

The vulnerability of Visual Studio Code’s source editor, which stems from improper handling of user data, allows attackers to perform spoofing attacks.

The vulnerability of Visual Studio Code’s source editor exists due to incorrect processing of user data. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...

4.3CVSS6.4AI score0.02691EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/03/18 12:0 a.m.13 views

PT-2022-16769

Name of the Vulnerable Software and Affected Versions Open Web Analytics versions prior to 1.7.4 Description The issue allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files...

9.8CVSS9.6AI score0.99055EPSS
SaveExploits14References21
NVD
NVD
added 2022/03/17 12:15 p.m.16 views

CVE-2021-45794

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained...

7.5CVSS0.01059EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/17 12:15 p.m.58 views

CVE-2021-45793

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

7.5CVSS0.04519EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/17 12:15 p.m.4 views

CVE-2021-45794

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained...

7.5CVSS5.9AI score0.01059EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/17 12:15 p.m.15 views

CVE-2021-45794

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained...

7.5CVSS7.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/17 12:15 p.m.7 views

CVE-2021-45793

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

7.5CVSS5.9AI score0.04519EPSS
SaveExploits1References3
OSV
OSV
added 2022/03/17 12:15 p.m.19 views

CVE-2021-45793

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

7.5CVSS7.9AI score
SaveExploits0References1
Prion
Prion
added 2022/03/17 12:15 p.m.22 views

Sql injection

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

5CVSS8AI score0.04519EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/03/17 12:15 p.m.19 views

Sql injection

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained...

5CVSS8AI score0.01059EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder