Lucene search
+L

257 matches found

Circl
Circl
added 2024/03/15 12:41 p.m.12 views

CVE-2019-0166

creationtimestamp| type| source ---|---|--- 2024-03-15 12:41:28+00:00| seen| https://t.me/ctinow/208704...

7.5CVSS7.9AI score0.01385EPSS
SaveExploits0References1
Circl
Circl
added 2024/02/12 8:26 p.m.14 views

CVE-2024-0166

creationtimestamp| type| source ---|---|--- 2024-02-12 20:26:48+00:00| seen| https://t.me/ctinow/183372 2025-05-06 21:21:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15226...

7.8CVSS7.5AI score0.01101EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/12 7:15 p.m.19 views

CVE-2024-0166

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svctcpdump utility. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands with elevated privileges...

7.8CVSS7.9AI score0.01101EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/12 6:27 p.m.61 views

CVE-2024-0166

Dell Unity contains an OS Command Injection in the svc_tcpdump utility for versions prior to 5.4. An authenticated, local attacker can exploit this to execute arbitrary OS commands with elevated privileges. The underlying issue is command parsing/input handling in svc_tcpdump, enabling command ex...

7.8CVSS7.8AI score0.01101EPSS
SaveExploits0References1Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:29 p.m.47 views

K14261: OpenSSL OCSP vulnerability CVE-2013-0166

Security Advisory Description OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for Online Certificate Status Protocol OCSP responses, which allow remote attackers to cause a denial-of-service DoS NULL pointer dereference and...

8AI score
SaveExploits0Affected Software13
SUSE CVE
SUSE CVE
added 2023/02/15 4:19 a.m.8 views

SUSE CVE-2019-0166

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

7.5CVSS7.6AI score0.01385EPSS
SaveExploits0References3
CVE
CVE
added 2023/02/13 2:32 p.m.68 views

CVE-2023-0166

The CVE refers to the WordPress plugin Product Slider for WooCommerce by PickPlugins, affected in versions prior to 1.13.42. The vulnerability arises because certain shortcode attributes are not validated or escaped before being output in a page or post, enabling Stored Cross-Site Scripting when ...

5.4CVSS5.3AI score0.00477EPSS
SaveExploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/13 2:32 p.m.12 views

CVE-2023-0166 PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

5.4AI score0.00477EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/02/13 2:32 p.m.27 views

CVE-2023-0166 PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS

The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

5.6AI score0.00477EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2023/01/23 12:00 a.m.20 views

WordPress Product Slider for WooCommerce Plugin < 1.13.42 is vulnerable to Cross Site Scripting (XSS)

Software Product Slider for WooCommerce Type Plugin Vulnerable versions 1.13.42 Fixed in 1.13.42 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0166 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6227f9b03713 Credits...

5.4CVSS5.7AI score0.00477EPSS
SaveExploits2References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/16 12:00 a.m.26 views

RHEL 8 : dpdk (RHSA-2023:0166)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0166 advisory. The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space...

8.6CVSS7.7AI score0.02224EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 3:31 a.m.41 views

Security Bulletin: Multiple vulnerabilities exist in the OpenSSL component of IBM Initiate Master Data Service and IBM InfoSphere Master Data Management Standard Edition (CVE-2013-0166, CVE-2013-0166, CVE-2012-2686)

Abstract Three security vulnerabilities exist in the version of OpenSSL shipped with IBM Initiate Master Data Service and IBM InfoSphere Master Data Management Standard Edition. See the individual descriptions for the details. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0166 DESCRIPTION: A fl...

5CVSS0.2AI score0.39593EPSS
SaveExploits3Affected Software2
OpenVAS
OpenVAS
added 2022/04/21 12:00 a.m.24 views

Slackware: Security Advisory (SSA:2013-040-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.8AI score0.39593EPSS
SaveExploits3References3
OpenVAS
OpenVAS
added 2022/03/31 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2022:1065-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6AI score0.00515EPSS
SaveExploits0References2
Photon
Photon
added 2022/03/25 12:00 a.m.65 views

Critical Photon OS Security Update - PHSA-2022-4.0-0166

Updates of 'squashfs-tools', 'httpd', 'consul', 'bluez' packages of Photon OS have been released...

9.8CVSS7.8AI score0.69803EPSS
SaveExploits0
Photon
Photon
added 2022/03/25 12:00 a.m.84 views

Critical Photon OS Security Update - PHSA-2022-0166

Updates of 'bluez', 'httpd', 'consul', 'squashfs-tools' packages of Photon OS have been released...

7.5CVSS1.6AI score0.69803EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2022/03/05 12:00 a.m.35 views

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2022:0721-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0721-1 advisory. - Update Intel Wireless firmware for 9xxx CVE-2021-0161, CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166,...

8.4CVSS6.4AI score0.00515EPSS
SaveExploits0References37
OpenVAS
OpenVAS
added 2022/02/16 12:00 a.m.26 views

Mageia: Security Advisory (MGASA-2022-0065)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS5.9AI score0.00515EPSS
SaveExploits0References5
Mageia
Mageia
added 2022/02/15 8:50 p.m.53 views

Updated nonfree firmware packages fix security vulnerabilities

This update provides new and updated nonfree firmwares and fixes at least the following security issues: Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access CVE-2021-0066 / SA-00539...

8.4CVSS7.1AI score0.00515EPSS
SaveExploits0References3
Intel
Intel
added 2022/02/15 12:00 a.m.44 views

Intel® PROSet/Wireless Wi-Fi, Intel® AMT Wireless and Killer™ Wi-Fi Software Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless Wi-Fi, Intel® Active Management Technology Intel® AMT Wireless and Killer™ Wi-Fi may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware and software updates to mitigate...

8.8CVSS7.6AI score0.00515EPSS
SaveExploits0
Rows per page
Query Builder