86 matches found
CVE-2026-0651
creationtimestamp| type| source ---|---|--- 2026-02-12 07:16:09+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3menh3nq5jf2t 2026-03-06 11:43:30+00:00| seen| https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mgfabrgdgk72 2026-03-06 16:44:17+00:00| seen|...
CVE-2026-0651
A path traversal vulnerability was identified TP-Link Tapo C260 v1, D235 v1 and C520WS v2.6 within the HTTP server’s handling of GET requests. The server performs path normalization before fully decoding URL encoded input and falls back to using the raw path when normalization fails. An attacker...
CVE-2022-0651
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpagetype parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...
EUVD-2026-0651
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
Important Photon OS Security Update - PHSA-2025-5.0-0651
Updates of 'binutils' packages of Photon OS have been released...
CVE-2013-0651
The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request...
Linux Distros Unpatched Vulnerability : CVE-2016-0651
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer. CVE-2016-0651 Note that...
CVE-2025-0651
Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all settings" option the WARP service will...
CVE-2025-0651 File symlink abuse might lead to deleting files belonging to SYSTEM user
Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all settings" option the WARP service will...
CVE-2025-0651
CVE-2025-0651 describes an improper privilege management issue in Cloudflare WARP for Windows. A low-privilege user can create a set of symlinks in C:\ProgramData\Cloudflare\warp-diag-partials. When a user triggers the “Reset all settings” option, the WARP service (running with System privileges)...
CVE-2025-0651 File symlink abuse might lead to deleting files belonging to SYSTEM user
Improper Privilege Management vulnerability in Cloudflare WARP on Windows allows File Manipulation. User with a low system privileges can create a set of symlinks inside the C:\ProgramData\Cloudflare\warp-diag-partials folder. After triggering the 'Reset all settings" option the WARP service will...
Photon OS 4.0: Httpd PHSA-2024-4.0-0651
An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0651. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Critical Photon OS Security Update - PHSA-2024-4.0-0651
Updates of 'httpd' packages of Photon OS have been released...
RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2016:1132)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1132 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. MariaD...
CVE-2024-0651
creationtimestamp| type| source ---|---|--- 2024-01-19 23:17:11+00:00| seen| https://t.me/ctinow/170454 2024-02-10 19:12:13+00:00| seen| https://t.me/ctinow/182628...
CVE-2024-0651
The CVE-2024-0651 entry concerns PHPGurukul Company Visitor Management System 1.0, where an SQL injection is triggered in an unknown functionality of search-visitor.php due to insufficient input validation. The vulnerability is exploitable remotely, with exploits disclosed publicly (VDB-251377). ...
Important Photon OS Security Update - PHSA-2023-3.0-0651
Updates of 'nxtgn-openssl' packages of Photon OS have been released...
CVE-2023-0651
creationtimestamp| type| source ---|---|--- 2023-02-02 18:45:00+00:00| seen| https://t.me/cibsecurity/57407...
CVE-2023-0651
The CVE-2023-0651 entry concerns FastCMS 0.1.0, specifically the Template Management component. The vulnerability allows unrestricted upload due to an unclear handling of uploads, enabling remote exploitation. Multiple connected sources reiterate the impact and remote exploitability; public discl...
CVE-2022-0651
creationtimestamp| type| source ---|---|--- 2022-02-24 22:15:04+00:00| seen| https://t.me/cibsecurity/38051...