Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.
XSS
Phpmyfaq
NVD
GitHub
CVSS 3.1
5.4
EPSS
0.4%
HashiCorp's Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Hashicorp
Vault
NVD
CVSS 3.1
5.3
EPSS
0.6%
Issue summary: Checking excessively long DH keys or parameters may be very slow. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
OpenSSL
Denial Of Service
NVD
CVSS 3.1
5.3
EPSS
2.6%
Prev
Page 2 of 2