Lucene search
K

40 matches found

ATTACKERKB
ATTACKERKB
added 2025/12/22 6:57 p.m.1 views

CVE-2025-15033

A vulnerability in WooCommerce 8.1 to 10.4.2 can allow logged-in customers to access order data of guest customers on sites with a certain configuration. This has been fixed in WooCommerce 10.4.3, as well as all the previously affected versions through point releases, starting from 8.1, where it...

6.5CVSS5.7AI score0.00029EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-2504

Malware in sbrugna...

4.6CVSS6.4AI score0.00071EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 3:18 a.m.2 views

CVE-2023-23474

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 245403...

5.3CVSS6.2AI score0.00048EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:25 p.m.2 views

CVE-2020-11063

In TYPO3 CMS versions 10.4.0 and 10.4.1, it has been discovered that time-based attacks can be used with the password reset functionality for backend users. This allows an attacker to mount user enumeration based on email addresses assigned to backend user accounts. This has been fixed in 10.4.2...

4.3CVSS4.8AI score0.00292EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/09/04 4:3 a.m.3 views

WordPress PixelYourSite PRO plugin <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion vulnerability

Unauthenticated Information Exposure and Log Deletion vulnerability discovered by Xetnus in WordPress Plugin PixelYourSite PRO versions = 10.4.2...

7.5CVSS7AI score0.00714EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/05/03 7:15 p.m.0 views

CVE-2023-40695

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 264938...

8.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2024/05/03 6:15 p.m.15 views

CVE-2023-40696

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 264939...

7.5CVSS5.9AI score0.00047EPSS
Exploits0References2
OSV
OSV
added 2024/05/03 6:15 p.m.0 views

CVE-2023-23474

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 245403...

5.3CVSS5.8AI score0.00048EPSS
Exploits0References2
OSV
OSV
added 2024/05/03 6:15 p.m.1 views

CVE-2023-28952

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data. IBM X-Force ID: 251463...

5.3CVSS5.8AI score0.0007EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/03 5:39 p.m.15 views

CVE-2023-28952 IBM Cognos Controller log injection

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data. IBM X-Force ID: 251463...

5.3CVSS5.5AI score0.0007EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 5:39 p.m.13 views

CVE-2023-28952 IBM Cognos Controller log injection

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data. IBM X-Force ID: 251463...

5.3CVSS6.7AI score0.0007EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.1 views

IBM Cognos Controller 安全漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and creating and managing financial reports. A security vulnerability exists in IBM Cognos Controller versio...

5.3CVSS8.6AI score0.00048EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.1 views

IBM Cognos Controller 加密问题漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and creating and managing financial reports. A cryptographic issue vulnerability exists in IBM Cognos...

7.5CVSS8.8AI score0.00052EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.2 views

IBM Cognos Controller 加密问题漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and creating and managing financial reports. A cryptographic issue vulnerability exists in IBM Cognos...

7.5CVSS8.9AI score0.00047EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.1 views

IBM Cognos Controller 安全漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. A user enumeration vulnerability exists in IBM Cognos...

5.3CVSS6.6AI score0.00068EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.2 views

IBM Cognos Controller 安全漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. A code execution vulnerability exists in IBM Cognos...

5.3CVSS7.5AI score0.0007EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.2 views

IBM Cognos Controller 安全漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and creating and managing financial reports. A security vulnerability exists in IBM Cognos Controller versio...

5.3CVSS8.8AI score0.00028EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/11/02 12:0 a.m.32 views

Tenable Nessus Agent 10.4.2 Multiple Vulnerabilities (TNS-2023-38)

Tenable Nessus Agent is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessusagent";...

9.8CVSS7.7AI score0.01396EPSS
Exploits0References1
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2023/01/18 3:22 p.m.14 views

[R2] Nessus Version 10.4.2 Fixes One Vulnerability

R2 Nessus Version 10.4.2 Fixes One Vulnerability Arnie Cabral Wed, 01/18/2023 - 10:22 A privilege escalation vulnerability was identified in Nessus versions 10.4.1 and earlier. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM...

5.6AI score
Exploits0
NCSC
NCSC
added 2022/02/01 12:0 a.m.2 views

Vulnerabilities fixed in IBM Cognos Controller

IBM has fixed vulnerabilities in Cognos Controller. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Remote code execution Use...

9.8CVSS9AI score0.04134EPSS
Exploits0
Rows per page
Query Builder