Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:12 a.m.3 views

CVE-2023-23720

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

5.9CVSS5.6AI score0.00207EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/09/01 12:0 a.m.6 views

WordPress Responsive Gallery Grid Plugin <= 2.3.13 is vulnerable to Cross Site Request Forgery (CSRF)

Software Responsive Gallery Grid Type Plugin Vulnerable versions = 2.3.13 Fixed in 2.3.14 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41659 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f625c8937bf3 Credits Rio...

8.8CVSS6.6AI score0.00051EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/05/16 10:15 a.m.11 views

CVE-2023-23720

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NetReviews SAS Verified Reviews Avis Vérifiés plugin = 2.3.13 versions...

5.9CVSS5.4AI score0.00207EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/08/11 12:0 a.m.3 views

PT-2021-7493 · Haproxy +2 · Haproxy +2

Name of the Vulnerable Software and Affected Versions: HAProxy versions 2.2 before 2.2.16 HAProxy versions 2.3 before 2.3.13 HAProxy versions 2.4 before 2.4.3 Description: The issue is related to a mismatch between Host and authority being mishandled, which can lead to an attacker-controlled HTTP...

7.8CVSS6.5AI score0.92378EPSS
Exploits5References42
Mageia
Mageia
added 2021/01/08 1:59 p.m.67 views

Updated dovecot packages fix security vulnerabilities

It was discovered that Dovecot incorrectly handled certain imap hibernation commands. A remote authenticated attacker could possibly use this issue to access other users’ email CVE-2020-24386. Innokentii Sennovskiy discovered that Dovecot incorrectly handled MIME parsing. A remote attacker could...

7.5CVSS2.7AI score0.03357EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2021/01/04 12:0 p.m.27 views

CVE-2020-25275

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts...

7.5CVSS7.1AI score0.03357EPSS
Exploits1References3
ArchLinux
ArchLinux
added 2021/01/04 12:0 a.m.134 views

[ASA-202101-4] dovecot: multiple issues

Arch Linux Security Advisory ASA-202101-4 ========================================= Severity: High Date : 2021-01-04 CVE-ID : CVE-2020-24386 CVE-2020-25275 Package : dovecot Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1398 Summary ======= The package dovecot befo...

7.5CVSS1.6AI score0.03357EPSS
Exploits1References9
Rows per page
Query Builder