Lucene search
K

81 matches found

Circl
Circl
added 2026/01/22 7:24 p.m.0 views

CVE-2026-0535

creationtimestamp| type| source ---|---|--- 2026-01-22 19:24:00+00:00| seen| Telegram/JvdqABuEPm4MmITV1epb9Z-coYWnwH09RWzf-G-nIWlpd6E...

8.1CVSS4.8AI score0.00036EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2011-0923

Malware in sbrugna...

4.3CVSS6.4AI score0.00225EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-0565

Malware in sbrugna...

7.5CVSS6AI score0.02345EPSS
Exploits0References17
Circl
Circl
added 2025/03/11 4:41 a.m.0 views

CVE-2023-0535

creationtimestamp| type| source ---|---|--- 2025-03-11 04:41:13+00:00| seen| Telegram/Zb3ib3mfCdi-7lB8SDKP9FMa4-TYZbpQuB8DqH6x1dbi6-C...

5.4CVSS4.8AI score0.00198EPSS
Exploits2
CVE
CVE
added 2025/01/17 7:0 p.m.50 views

CVE-2025-0535

Codezips Gym Management System 1.0 is affected by a SQL injection in /dashboard/admin/edit_mem_submit.php via the uid parameter. The vulnerability’s root cause is unvalidated uid allowing attacker-controlled input to influence SQL queries. The CVE notes remote exploitation and public disclosure. ...

9.8CVSS7.7AI score0.00112EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/01/17 7:0 p.m.8 views

CVE-2025-0535 Codezips Gym Management System edit_mem_submit.php sql injection

A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown part of the file /dashboard/admin/editmemsubmit.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

6.5CVSS0.00112EPSS
Exploits1References4
Circl
Circl
added 2024/01/15 4:26 a.m.0 views

CVE-2024-0535

creationtimestamp| type| source ---|---|--- 2024-01-15 04:26:33+00:00| seen| https://t.me/ctinow/168140 2024-02-03 09:46:29+00:00| seen| https://t.me/ctinow/178449...

9.8CVSS8.2AI score0.00133EPSS
Exploits0References2
CVE
CVE
added 2024/01/15 3:0 a.m.52 views

CVE-2024-0535

CVE-2024-0535 affects Tenda PA6 1.0.1.21, specifically the httpd/portmap component. The vulnerability is in cgiPortMapAdd of /portmap, where improper validation of the groupName parameter leads to a stack-based buffer overflow. It can be triggered remotely, and public exploit information has been...

9.8CVSS9.6AI score0.00133EPSS
Exploits0References3Affected Software1
Photon
Photon
added 2023/12/24 12:0 a.m.38 views

Important Photon OS Security Update - PHSA-2023-4.0-0535

Updates of 'glibc' packages of Photon OS have been released...

7.5CVSS10AI score0.01895EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.21 views

Rocky Linux 8 : thunderbird (RLSA-2022:0535)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0535 advisory. - If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants...

9.6CVSS8.1AI score0.00533EPSS
Exploits1References15
Patchstack
Patchstack
added 2023/02/28 12:0 a.m.5 views

WordPress Donation Block For PayPal Plugin < 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Donation Block For PayPal Type Plugin Vulnerable versions 2.1.0 Fixed in 2.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0535 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b8d846d35c7d Credits Lana Codes...

5.4CVSS5.9AI score0.00198EPSS
Exploits2References4Affected Software1
NVD
NVD
added 2023/02/27 4:15 p.m.7 views

CVE-2023-0535

The Donation Block For PayPal WordPress plugin before 2.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

5.4CVSS5.3AI score0.00198EPSS
Exploits2References1
OSV
OSV
added 2023/02/27 4:15 p.m.1 views

CVE-2023-0535

The Donation Block For PayPal WordPress plugin before 2.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

5.4CVSS6.7AI score0.00198EPSS
Exploits2References1
CVE
CVE
added 2023/02/27 3:24 p.m.53 views

CVE-2023-0535

CVE-2023-0535 concerns the WordPress plugin “Donation Block For PayPal”. Before version 2.1.0, the plugin does not validate or escape certain shortcode attributes, allowing a user with Contributor+ privileges to induce Stored Cross-Site Scripting by outputting untrusted attributes into a page or ...

5.4CVSS5.3AI score0.00198EPSS
Exploits2References1Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 6:59 p.m.35 views

K06015902: Intel AMT vulnerabilities CVE-2020-0531, CVE-2020-0532, and CVE-2020-0535

Security Advisory Description CVE-2020-0531 Improper input validation in IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via network access. CVE-2020-0532 Improper input validation in subsystem for...

7.1CVSS5.9AI score0.00859EPSS
Exploits0
CVE
CVE
added 2022/03/07 8:16 a.m.101 views

CVE-2022-0535

WordPress E2Pdf plugin prior to 1.16.45 is affected. The vulnerability is a Cross-Site Scripting flaw caused by insufficient sanitization/escaping of certain settings, allowing an attacker to inject scripts in the context of authenticated users even when unfiltered_html is disallowed. Impact coul...

4.8CVSS4.7AI score0.0224EPSS
Exploits2References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/16 12:0 a.m.49 views

CentOS 8 : thunderbird (CESA-2022:0535)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:0535 advisory. - Mozilla: Extensions could have bypassed permission confirmation during update CVE-2022-22754 - Mozilla: Drag and dropping an image could have resulte...

9.6CVSS7.6AI score0.00533EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2022/02/16 12:0 a.m.32 views

Oracle Linux 8 : thunderbird (ELSA-2022-0535)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-0535 advisory. 91.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 91.6.0-1 - Update to 91.6.0 build1 Tenable has...

9.6CVSS7.6AI score0.00533EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2022/02/16 12:0 a.m.30 views

RHEL 8 : thunderbird (RHSA-2022:0535)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0535 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.6.0. Security Fixes: Mozilla:...

9.6CVSS7.8AI score0.00533EPSS
Exploits1References16
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2014-0261)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.06932EPSS
Exploits0References4
Rows per page
Query Builder