106 matches found
ROOT-OS-UBUNTU-2404-CVE-2017-0537 CVE-2017-0537 in rootio-linux - Patched by Root
Root has patched CVE-2017-0537 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2017-0537
creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2026-0537
creationtimestamp| type| source ---|---|--- 2026-02-04 17:17:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2exr7gtg23...
RHSA-2026:0537 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
CVE-2022-0537
The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOWFILEEDIT and DISALLOWFILEMODS settings and upload arbitrary files to the site through the "ajaxsave" function. The file is written relative to the current 's stylesheet directory, and a .php...
EUVD-2026-0537
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
CVE-2025-0537
A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0. This issue affects some unknown processing of the file /admin/manage-pages.php. The manipulation of the argument pgdetails leads to cross site scripting. The attack may be...
CVE-2020-0537
Improper input validation in subsystem for IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access...
Linux Distros Unpatched Vulnerability : CVE-2017-0537
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of its permission...
CVE-2025-0537 code-projects Car Rental Management System manage-pages.php cross site scripting
A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0. This issue affects some unknown processing of the file /admin/manage-pages.php. The manipulation of the argument pgdetails leads to cross site scripting. The attack may be...
VulnCheck KEV: CVE-2019-0537
An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio...
CVE-2024-0537
A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.74456. This affects the function setWrlBasicInfo of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...
CVE-2024-0537
The CVE-2024-0537 issue affects Tenda W9 1.0.0.7(4456) in the httpd component, specifically the setWrlBasicInfo function. The root cause is a stack-based buffer overflow triggered by manipulating the ssidIndex argument, enabling remote attack and potential arbitrary code execution. The vulnerabil...
CVE-2023-0537
creationtimestamp| type| source ---|---|--- 2023-05-08 18:37:37+00:00| seen| https://t.me/cibsecurity/63428...
CVE-2023-0537 Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS
The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...
CVE-2023-0537
CVE-2023-0537 affects the WordPress plugin Product Slider For WooCommerce Lite (versions ≤ 1.1.7). The issue is stored cross-site scripting due to inadequate validation/escaping of shortcode attributes prior to output when the shortcode is embedded on a page, enabling attackers with contributor+ ...
CVE-2023-0537 Product Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSS
The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...
WordPress Product Slider For WooCommerce Lite Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Software Product Slider For WooCommerce Lite Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0537 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5eb92cf8631c Credits...
K29814751: Intel AMT vulnerabilities CVE-2020-0537, CVE-2020-0538, and CVE-2020-0540
Security Advisory Description CVE-2020-0537 Improper input validation in subsystem for IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access. CVE-2020-0538 Improper input validation in subsystem fo...
Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022
During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group...