Lucene search
+L

99 matches found

CVE
CVE
added 2024/02/05 9:21 p.m.46 views

CVE-2024-0509

CVE-2024-0509 concerns the WordPress plugin WP 404 Auto Redirect to Similar Post . The vulnerability is a Reflected Cross-Site Scripting (XSS) via the vulnerable parameter named “request” in all versions up to and including 1.0.3, caused by insufficient input sanitization and output escaping. Imp...

6.1CVSS6.4AI score0.01231EPSS
SaveExploits0References2Affected Software1
Photon
Photon
added 2023/11/10 12:00 a.m.41 views

Critical Photon OS Security Update - PHSA-2023-4.0-0509

Updates of 'memcached' packages of Photon OS have been released...

9.8CVSS7AI score0.00778EPSS
SaveExploits0
CVE
CVE
added 2023/01/26 12:00 a.m.96 views

CVE-2023-0509

CVE-2023-0509 affects the Python-based download manager pyload/pyload, with versions prior to 0.5.0b3.dev44 failing to validate TLS certificates. Root cause: improper certificate validation. Impact per sources: high risk to confidentiality and integrity; no availability impact indicated. Affected...

7.4CVSS7.4AI score0.00526EPSS
SaveExploits1References2Affected Software2
Vulnrichment
Vulnrichment
added 2023/01/26 12:00 a.m.10 views

CVE-2023-0509 Improper Certificate Validation in pyload/pyload

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS6.8AI score0.00526EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/01/26 12:00 a.m.26 views

CVE-2023-0509 Improper Certificate Validation in pyload/pyload

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS7.7AI score0.00526EPSS
SaveExploits1References2
Circl
Circl
added 2022/02/08 2:36 p.m.13 views

CVE-2022-0509

creationtimestamp| type| source ---|---|--- 2022-02-08 14:36:55+00:00| seen| https://t.me/cibsecurity/36986...

6.6CVSS5.8AI score0.01438EPSS
SaveExploits1References1
CVE
CVE
added 2022/02/08 11:30 a.m.87 views

CVE-2022-0509

Pimcore’s Cross-site Scripting vulnerability CVE-2022-0509 affects pimcore/pimcore versions prior to 10.3.1. The root cause is improper handling of special characters in data, enabling stored XSS. Impact is client-side script execution if an attacker can inject malicious content, with the comprom...

6.6CVSS5.3AI score0.01438EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.22 views

Mageia: Security Advisory (MGASA-2014-0169)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.0761EPSS
SaveExploits4References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.18 views

Mageia: Security Advisory (MGASA-2014-0509)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS9.6AI score0.09694EPSS
SaveExploits1References4
Circl
Circl
added 2021/06/22 2:48 a.m.16 views

CVE-2021-0509

creationtimestamp| type| source ---|---|--- 2021-06-22 02:48:32+00:00| exploited| Telegram/pXXpkyIKKjP6HGr75dXubd35Ff5pZJ1jIXS6bIhmcm7Q-E...

7CVSS7AI score0.00168EPSS
SaveExploits0
CVE
CVE
added 2021/06/21 4:01 p.m.153 views

CVE-2021-0509

CVE-2021-0509 : A race condition causes a use-after-free in CryptoPlugin.cpp, leading to local privilege escalation with no additional privileges or user interaction required. Affected products/versions in the provided data include Android 8.1, 9, 10, and 11. The documents do not specify a public...

7CVSS7AI score0.00168EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/02/15 12:00 a.m.32 views

RHEL 8 : subversion:1.10 (RHSA-2021:0509)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0509 advisory. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of fil...

7.5CVSS7.5AI score0.40075EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2020/11/23 12:00 a.m.30 views

Cisco SD-WAN vManage Software XSS (cisco-sa-vmanxss2-ugJyqxWF)

According to its self-reported version, Cisco SD-WAN vManage is affected by a cross-site scripting XSS vulnerability in the web-based management interface due to not properly validating user-supplied input. An authenticated, remote attacker can exploit this, by convincing a user to click a...

6.4CVSS6.6AI score0.00649EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/11/06 12:00 a.m.29 views

Cisco SD-WAN vManage Software Authorization Bypass (cisco-sa-uabvman-SYGzt8Bv)

According to its self-reported version, Cisco SD-WAN vManage is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

9.9CVSS8.4AI score0.01917EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/02/14 12:25 p.m.93 views

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS7.4AI score0.19426EPSS
SaveExploits14References2
Virtuozzo
Virtuozzo
added 2019/03/19 12:00 a.m.23 views

Virtuozzo Linux Errata and Bugfix Advisory 2019:0509

Upstream security update. Follow RHBA-2019:0509 for details...

2.4AI score
SaveExploits0
NVD
NVD
added 2018/02/01 2:29 p.m.21 views

CVE-2018-0509

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

8.8CVSS8.8AI score0.00632EPSS
SaveExploits0References2
CVE
CVE
added 2018/02/01 2:00 p.m.58 views

CVE-2018-0509

CVE-2018-0509 is a CSRF vulnerability in the epg search result viewer (kkcald) affecting version 0.7.21 and earlier. The exposed issue allows an attacker to hijack the authentication of administrators via unspecified vectors. The related CNVD/JVN records corroborate this CSRF flaw and cite the af...

8.8CVSS9.1AI score0.00632EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2017/03/08 1:00 a.m.91 views

CVE-2017-0509

CVE-2017-0509 is an elevation-of-privilege in the Broadcom Wi‑Fi driver that could let a local malicious app execute arbitrary code in the kernel. Affected product: Android. Root cause: Broadcom Wi‑Fi driver vulnerability enabling local code execution with no privileges required and user interact...

9.3CVSS7.2AI score0.01363EPSS
SaveExploits0References5Affected Software1
Huawei
Huawei
added 2016/12/14 12:00 a.m.29 views

Security Advisory - Buffer Overflow Vulnerability in Wi-FI Driver of Huawei Smart Phone

The Wi-Fi driver of some Huawei products has buffer overflow vulnerability due to the lack of a parameters check. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege...

9.3CVSS7.8AI score0.01363EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder