Lucene search
K

1626 matches found

RedhatCVE
RedhatCVE
added 2025/12/01 1:18 p.m.3 views

CVE-2025-66224

OrangeHRM is a comprehensive human resource management HRM system. From version 5.0 to 5.7, the application contains an input-neutralization flaw in its mail configuration and delivery workflow that allows user-controlled values to flow directly into the system’s sendmail command. Because these...

9CVSS6.9AI score0.00132EPSS
Exploits1References1
OSV
OSV
added 2025/11/29 3:4 a.m.4 views

CVE-2025-66224 OrangeHRM is Vulnerable to Code Execution Through Arbitrary File Write from Sendmail Parameter Injection

OrangeHRM is a comprehensive human resource management HRM system. From version 5.0 to 5.7, the application contains an input-neutralization flaw in its mail configuration and delivery workflow that allows user-controlled values to flow directly into the system’s sendmail command. Because these...

9CVSS6.9AI score0.00132EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/11/29 3:4 a.m.7 views

CVE-2025-66224 OrangeHRM is Vulnerable to Code Execution Through Arbitrary File Write from Sendmail Parameter Injection

OrangeHRM is a comprehensive human resource management HRM system. From version 5.0 to 5.7, the application contains an input-neutralization flaw in its mail configuration and delivery workflow that allows user-controlled values to flow directly into the system’s sendmail command. Because these...

9CVSS6.6AI score0.00132EPSS
Exploits1References1
CVE
CVE
added 2025/11/29 3:4 a.m.14 views

CVE-2025-66224

OrangeHRM versions 5.0–5.7 contain an input-neutralization flaw in mail configuration and delivery workflow where user-controlled values flow into the sendmail path without sanitization, allowing OS command strings to be constructed and enabling file writes on the server and potential code execut...

9CVSS6.6AI score0.00132EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2025/11/29 3:4 a.m.7 views

CVE-2025-66224 OrangeHRM is Vulnerable to Code Execution Through Arbitrary File Write from Sendmail Parameter Injection

OrangeHRM is a comprehensive human resource management HRM system. From version 5.0 to 5.7, the application contains an input-neutralization flaw in its mail configuration and delivery workflow that allows user-controlled values to flow directly into the system’s sendmail command. Because these...

9CVSS0.00132EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.3 views

CVE-2023-7312

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting XSS vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affecte...

6.2CVSS5.7AI score0.00454EPSS
Exploits0References1
OSV
OSV
added 2025/10/30 10:15 p.m.1 views

CVE-2023-7312

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting XSS vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affecte...

4.8CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2025/10/30 10:15 p.m.3 views

CVE-2023-7312

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting XSS vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affecte...

6.2CVSS0.00454EPSS
Exploits0References3
CVE
CVE
added 2025/10/30 9:19 p.m.5 views

CVE-2023-7312

Nagios Fusion is affected by a stored XSS in Email Settings for versions prior to 4.2.0. The vulnerability arises from insufficient input sanitization, allowing unsanitized input to be stored and later rendered in the administrative UI, enabling JavaScript execution in the browsers of users viewi...

6.2CVSS5.3AI score0.00454EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 9:19 p.m.1 views

CVE-2023-7312 Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting XSS vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affecte...

6.2CVSS5.3AI score0.00454EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/30 9:19 p.m.5 views

CVE-2023-7312 Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting XSS vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affecte...

6.2CVSS0.00454EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-1999-0750

Malware in sbrugna...

7.2CVSS6.4AI score0.0038EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-0304

Malware in sbrugna...

7.5CVSS6AI score0.03667EPSS
Exploits1References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-1999-0129

Malware in sbrugna...

4.6CVSS6.1AI score0.00122EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2001-0701

Malware in sbrugna...

2.1CVSS6.4AI score0.00095EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-1999-0130

Malware in sbrugna...

7.2CVSS6.4AI score0.00886EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-1999-0098

Malware in sbrugna...

10CVSS6.4AI score0.00962EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-1999-1290

Malware in sbrugna...

7.2CVSS6.4AI score0.00116EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2002-2240

Malware in sbrugna...

7.5CVSS6.2AI score0.00623EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2009-3994

Malware in sbrugna...

7.5CVSS6AI score0.03135EPSS
Exploits1References13
Rows per page
Query Builder