Lucene search
K

113 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.4 views

MiracleLinux 3 : cups-1.3.7-8.6.1AXS3 (AXSA:2009-65:02)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-65:02 advisory. The Common UNIX Printing System provides a portable printing layer for UNIX operating systems. It has been developed by Easy Software Products to promote a...

7.5CVSS7.1AI score0.22431EPSS
Exploits3References2
RedhatCVE
RedhatCVE
added 2026/01/09 10:2 a.m.7 views

CVE-2011-0949

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshdlock files from /tmp/, which allows remote attackers to cause a denial of service disk consumption by making many SSHv1 connections, aka Bug ID CSCtd64417...

7.8CVSS6.9AI score0.00427EPSS
Exploits1References1
EUVD
EUVD
added 2026/01/06 4:36 p.m.2 views

EUVD-2026-0949

Missing Authorization vulnerability in CoolHappy The Events Calendar Countdown Addon countdown-for-the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar Countdown Addon: from n/a through = 1.4.15...

5.4CVSS6.5AI score0.0003EPSS
Exploits0References2
Circl
Circl
added 2025/10/14 1:14 p.m.0 views

CVE-2024-0949

creationtimestamp| type| source ---|---|--- 2025-10-14 13:14:51+00:00| seen| Telegram/66B9k-IglePzdcd7-biTGW01opAO9JMPpJZbOYj2PxSbJeM...

9.8CVSS4.8AI score0.00027EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2013-0949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

6.8CVSS6.2AI score0.01314EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:17 p.m.1 views

CVE-2020-0949

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0950...

9.3CVSS8.5AI score0.2125EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:40 a.m.7 views

CVE-2019-0949

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951...

5.7CVSS6.5AI score0.12374EPSS
Exploits0References1
Circl
Circl
added 2025/02/01 7:15 p.m.3 views

CVE-2025-0949

creationtimestamp| type| source ---|---|--- 2025-02-01 19:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh57xyphjk2i 2025-02-01 21:26:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3780 2025-02-01 21:42:58+00:00| seen|...

8.8CVSS6.2AI score0.00017EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/02/01 7:0 p.m.8 views

CVE-2025-0949 itsourcecode Tailoring Management System partview.php sql injection

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file partview.php. The manipulation of the argument typeid leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS7.5AI score0.00017EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/02/01 7:0 p.m.14 views

CVE-2025-0949 itsourcecode Tailoring Management System partview.php sql injection

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file partview.php. The manipulation of the argument typeid leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS0.00017EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2024/06/27 10:15 a.m.2 views

CVE-2024-0949

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...

9.8CVSS5.8AI score0.00027EPSS
Exploits0References3
CVE
CVE
added 2024/06/27 9:36 a.m.50 views

CVE-2024-0949

CVE-2024-0949 affects Talya Informatics’ Elektraweb prior to 17.0.68. The issue is described as Missing Authentication and Use of Hard-coded Credentials that enables Authentication Bypass due to improper access control, potentially exposing files/directories externally and impacting confidentiali...

9.8CVSS5.8AI score0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/27 9:36 a.m.6 views

CVE-2024-0949 Improper Access Control in Talya Informatics' Elektraweb

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...

9.8CVSS5.8AI score0.00027EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2023/02/22 9:30 a.m.1 views

modoboa-automua (=1.0.0) potentially affected by CVE-2023-0949 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0949 Source advisory: OSV:GHSA-MGMM-CMHJ-2H5F...

4.8CVSS5.8AI score0.00149EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2023/02/22 9:15 a.m.1 views

modoboa-automua (=1.0.0) potentially affected by CVE-2023-0949 via modoboa (=1.17.0)

modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0949 Source advisory: OSV:PYSEC-2023-33...

4.8CVSS5.8AI score0.00149EPSS
Exploits1
Cvelist
Cvelist
added 2023/02/22 12:0 a.m.13 views

CVE-2023-0949 Cross-site Scripting (XSS) - Reflected in modoboa/modoboa

Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...

4.8CVSS5.2AI score0.00149EPSS
Exploits1References2
OSV
OSV
added 2023/02/22 12:0 a.m.14 views

CVE-2023-0949 Cross-site Scripting (XSS) - Reflected in modoboa/modoboa

Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...

4.8CVSS5AI score0.00149EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/02/22 12:0 a.m.3 views

CVE-2023-0949 Cross-site Scripting (XSS) - Reflected in modoboa/modoboa

Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...

4.8CVSS5AI score0.00149EPSS
Exploits1References2
CVE
CVE
added 2023/02/22 12:0 a.m.55 views

CVE-2023-0949

Modoboa (modoboa/modoboa) is affected by a reflected Cross-site Scripting (XSS) in versions prior to 2.0.5. The underlying issue is user input reflected in output without sufficient sanitization, enabling XSS. A patch/fix is available in version 2.0.5 and later; upgrade to 2.0.5+ to mitigate. Oth...

4.8CVSS4.9AI score0.00149EPSS
Exploits1References2Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 6:4 p.m.40 views

K04362926: BIOS SMM privilege escalation vulnerability CVE-2015-0949

Security Advisory Description The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local...

7.8CVSS7.5AI score0.00077EPSS
Exploits0Affected Software14
Rows per page
Query Builder