Lucene search
K

225 matches found

EUVD
EUVD
added 2026/01/02 6:30 p.m.1 views

EUVD-2026-0419

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
Circl
Circl
added 2025/09/17 8:43 a.m.0 views

CVE-2025-0419

creationtimestamp| type| source ---|---|--- 2025-09-17 08:43:42+00:00| seen| Telegram/NXgWhBVN4rnIvzU7Z5VubpPmSF2YKmqoSjnE9jRJOgNvWI0...

4.7CVSS4.8AI score0.00064EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 9:32 a.m.4 views

CVE-2024-0419

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

7.5CVSS6.9AI score0.00107EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:0 p.m.4 views

CVE-2020-0419

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.1AI score0.00015EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 2:49 a.m.57 views

Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.9

Summary Apache Portable Runtime, The Expat XML Parser and DOORS Web Access are identified as vulnerable components with multiple reported vulnerabilities. The IBM Engineering Requirements Management DOORS/DWA product version 9.7.2.8 is vulnerable to the below mentioned CVEs. Remediation actions a...

9.8CVSS10AI score0.48782EPSS
Exploits12Affected Software1
Packet Storm
Packet Storm
added 2024/09/01 12:0 a.m.162 views

Novell Groupwise Agents HTTP Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Novell Groupwise Agents HTTP Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability in Novell Groupwis...

5CVSS7AI score0.75143EPSS
Exploits4
RedHat Linux
RedHat Linux
added 2024/01/25 8:11 a.m.29 views

Moderate: Red Hat Security Advisory: c-ares security update

An update for c-ares is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

5.9CVSS7AI score0.00115EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/25 12:0 a.m.43 views

RHEL 8 : c-ares (RHSA-2024:0419)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0419 advisory. The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Heap buffer over...

5.9CVSS7.7AI score0.00115EPSS
Exploits1References5
Circl
Circl
added 2024/01/11 8:46 p.m.0 views

CVE-2024-0419

creationtimestamp| type| source ---|---|--- 2024-01-11 20:46:37+00:00| seen| https://t.me/ctinow/166819 2024-01-18 21:16:48+00:00| seen| https://t.me/ctinow/169935 2024-01-30 14:11:23+00:00| seen| https://t.me/ctinow/175909...

7.5CVSS5.8AI score0.00107EPSS
Exploits1References3
OSV
OSV
added 2024/01/11 7:15 p.m.2 views

CVE-2024-0419

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

7.5CVSS4.9AI score
Exploits0References4
CVE
CVE
added 2024/01/11 6:31 p.m.41 views

CVE-2024-0419

The CVE-2024-0419 entry concerns Jasper httpdx (up to version 1.5.4). The vulnerability affects the HTTP POST Request Handler component, with a denial-of-service impact. It may be triggered remotely, and public disclosure of the exploit is noted. No concrete patch or remediation details are provi...

7.5CVSS7.5AI score0.00107EPSS
Exploits1References4Affected Software1
Circl
Circl
added 2023/09/29 4:47 p.m.3 views

CVE-2002-0419

creationtimestamp| type| source ---|---|--- 2023-09-29 16:47:35+00:00| seen| Telegram/ur-Lyd49VHpxKoXkjESwJUgOnBG7v2peqoTg0PaObyDQ...

5CVSS4.8AI score0.31296EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2023/08/08 12:0 a.m.35 views

Security Updates for Outlook (August 2023)

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-36893...

6.5CVSS7.1AI score0.00916EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.26 views

Debian: Security Advisory (DSA-2010-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7AI score0.00765EPSS
Exploits1References3
F5 Networks
F5 Networks
added 2023/02/21 7:53 p.m.37 views

K15920: Apache vulnerability CVE-2011-0419

Security Advisory Description Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle...

4.3CVSS7.8AI score0.48782EPSS
Exploits5Affected Software11
CVE
CVE
added 2023/02/21 8:51 a.m.49 views

CVE-2023-0419

CVE-2023-0419 concerns the WordPress plugin “Shortcode for Font Awesome” prior to version 1.4.1. The vulnerability arises because the shortcode attributes are not properly validated or escaped before being echoed into pages/posts, enabling a stored XSS condition for users with the contributor rol...

5.4CVSS5.3AI score0.00363EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2023/02/21 8:51 a.m.10 views

CVE-2023-0419 Shortcode for Font Awesome < 1.4.1 - Contributor+ Stored XSS

The Shortcode for Font Awesome WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

5.6AI score0.00363EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2023/02/16 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2023:0419-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.9AI score0.86472EPSS
Exploits5References2
Patchstack
Patchstack
added 2023/01/24 12:0 a.m.5 views

WordPress Shortcode for Font Awesome Plugin < 1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Shortcode for Font Awesome Type Plugin Vulnerable versions 1.4.1 Fixed in 1.4.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0419 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6bad482aa401 Credits István...

5.4CVSS5.7AI score0.00363EPSS
Exploits2References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.29 views

Security Bulletin: IBM Smart Analytics System 5600 is affected by vulnerabilities in the IBM Java SDK

Abstract The IBM Smart Analytics System 5600 contains a management host that is installed with the Mozilla Firefox browser. The browser is configured to use IBM Java SDK for Java Web Start applications. The browser software is configured in this manner to allow the use of the Remote Control...

10CVSS8.4AI score0.93397EPSS
Exploits74Affected Software1
Rows per page
Query Builder