Lucene search
K

27 matches found

OSV
OSV
added 2026/03/24 9:16 a.m.2 views

UBUNTU-CVE-2026-4649

Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new message CVE-2026-27446 https://www.cve.org/CVERecord . Since KNIME Business Hub uses Apache Artemis it is also affected by the issue...

5.3CVSS5.9AI score0.00085EPSS
Exploits0References3
OSV
OSV
added 2025/12/10 6:30 p.m.2 views

GHSA-8JQM-8QM3-QGQM Algernon Cross-Site Scripting vulnerability

Cross-site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

5.1CVSS7AI score0.00011EPSS
Exploits2References5
EUVD
EUVD
added 2025/12/10 6:30 p.m.1 views

EUVD-2025-202586

Algernon Cross-Site Scripting vulnerability...

5.8AI score0.00011EPSS
Exploits2References5
Github Security Blog
Github Security Blog
added 2025/12/10 6:30 p.m.2 views

Algernon Cross-Site Scripting vulnerability

Cross-site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.1CVSS7.1AI score0.00011EPSS
Exploits2References6Affected Software1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.1 views

algernon 安全漏洞

algernon is a web server by Alexander F. Rødseth Personal Developer. A security vulnerability exists in algernon version 1.17.4, which stems from the presence of cross-site scripting in filenames that could lead to the execution of arbitrary code...

6.1CVSS6.1AI score0.00011EPSS
Exploits2References4
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.1 views

PT-2025-50364

Name of the Vulnerable Software and Affected Versions Algernon version 1.17.4 Description A Cross Site Scripting issue exists in Algernon version 1.17.4. This allows attackers to execute arbitrary code by injecting a crafted payload into a filename. The issue involves the injection of malicious...

6.9AI score0.00011EPSS
Exploits2References5
Cvelist
Cvelist
added 2025/12/10 12:0 a.m.26 views

CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

0.00011EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2025/12/10 12:0 a.m.1 views

CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.7AI score0.00011EPSS
Exploits2References3
GithubExploit
GithubExploit
added 2025/12/09 4:36 p.m.141 views

Exploit for CVE-2025-65754

CVE-2025-65754 : Stored XSS in Algernon 1.17.4 Description...

5.8AI score0.00011EPSS
Exploits2
NVD
NVD
added 2025/11/07 9:15 p.m.5 views

CVE-2025-64442

HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious input to be executed in search previews. This issue is fixed in version 1.17.4...

7.1CVSS0.00026EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/07 8:28 p.m.3 views

CVE-2025-64442 HumHub is vulnerable to XSS through its Meta Search component

HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious input to be executed in search previews. This issue is fixed in version 1.17.4...

7.1CVSS5.8AI score0.00026EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/07 8:28 p.m.4 views

EUVD-2025-38326

HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious input to be executed in search previews. This issue is fixed in version 1.17.4...

7.1CVSS5.7AI score0.00026EPSS
Exploits0References3
CVE
CVE
added 2025/11/07 8:28 p.m.8 views

CVE-2025-64442

HumHub (Open Source Enterprise Social Network) versions before 1.17.4 are affected by a cross-site scripting (XSS) vulnerability in the Meta-Search feature, allowing malicious input to execute in search previews. The issue is fixed in version 1.17.4. Impact is consistent with XSS (information dis...

7.1CVSS5.8AI score0.00026EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/11/07 8:28 p.m.4 views

CVE-2025-64442 HumHub is vulnerable to XSS through its Meta Search component

HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious input to be executed in search previews. This issue is fixed in version 1.17.4...

7.1CVSS6.2AI score0.00026EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/11/07 8:28 p.m.5 views

CVE-2025-64442 HumHub is vulnerable to XSS through its Meta Search component

HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious input to be executed in search previews. This issue is fixed in version 1.17.4...

7.1CVSS0.00026EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.4 views

HumHub 跨站脚本漏洞

HumHub is the HumHub open source suite of open source social networking software written on the Yii PHP framework. A cross-site scripting vulnerability exists in HumHub versions prior to 1.17.4, which stems from a cross-site scripting vulnerability in the Meta-Search functionality that could caus...

7.1CVSS5.9AI score0.00026EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45505

Name of the Vulnerable Software and Affected Versions HumHub versions prior to 1.17.4 Description HumHub, an Open Source Enterprise Social Network, contains a cross-site scripting XSS issue within the Meta-Search feature. This flaw allows for the execution of malicious input in search previews...

7.1CVSS5.9AI score0.00026EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-35492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's...

7.8CVSS6.7AI score0.0027EPSS
Exploits0References2
OSV
OSV
added 2024/06/15 12:0 a.m.6 views

OPENSUSE-SU-2024:11846-1 qtox-1.17.4-1.1 on GA media

These are all security issues fixed in the qtox-1.17.4-1.1 package on the GA media of openSUSE Tumbleweed...

9.8CVSS9.5AI score0.03947EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:51 a.m.2 views

SUSE CVE-2020-35492

A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untruste...

7.8CVSS6.6AI score0.0027EPSS
Exploits0References3
Rows per page
Query Builder