Lucene search
+L

99 matches found

Circl
Circl
added 2023/10/29 5:18 p.m.14 views

CVE-2005-10002

creationtimestamp| type| source ---|---|--- 2023-10-29 17:18:43+00:00| seen| https://t.me/cibsecurity/73117...

9.8CVSS5.4AI score0.00746EPSS
Exploits0References1
CVE
CVE
added 2023/10/29 2:31 p.m.73 views

CVE-2005-10002

The CVE-2005-10002 issue affects the almosteffortless secure-files Plugin (WordPress) up to version 1.1. The vulnerability resides in the sf_downloads function within secure-files.php, where manipulation of the downloadfile argument enables path traversal. A fixed version exists: upgrade to versi...

9.8CVSS6.7AI score0.00746EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.25 views

Debian: Security Advisory (DLA-763-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.06766EPSS
Exploits0References3
Circl
Circl
added 2023/03/05 7:41 a.m.8 views

CVE-2008-10002

creationtimestamp| type| source ---|---|--- 2023-03-05 07:41:34+00:00| seen| https://t.me/cibsecurity/59427...

6.1CVSS4.7AI score0.00531EPSS
Exploits0References1
CVE
CVE
added 2023/03/05 2:0 a.m.73 views

CVE-2008-10002

CVE-2008-10002 affects cfire24 ajaxlife up to 0.3.2. The vulnerability is a cross-site scripting issue tied to unknown code paths, exploitable remotely. A fix is available in version 0.3.3, with patch reference 9fb53b67312fe3f4336e01c1e3e1bedb4be0c1c8 (VDB-222286). Upgrading to 0.3.3 is recommend...

6.1CVSS4.5AI score0.00531EPSS
Exploits0References4Affected Software1
Circl
Circl
added 2023/02/07 8:46 p.m.6 views

CVE-2011-10002

creationtimestamp| type| source ---|---|--- 2023-02-07 20:46:07+00:00| seen| https://t.me/cibsecurity/57682...

9.8CVSS6.2AI score0.00735EPSS
Exploits1References1
CVE
CVE
added 2023/02/07 5:0 p.m.58 views

CVE-2011-10002

CVE-2011-10002 affects weblabyrinth 0.3.1; the Labyrinth function in labyrinth.inc.php allows SQL injection. Upgrading to version 0.3.2 mitigates the issue (patch ID 60793fd8c8c4759596d3510641e96ea40e7f60e9; VDB-220221). Connected sources confirm the vulnerability and fix; exploitation status is ...

9.8CVSS8AI score0.00735EPSS
Exploits1References5Affected Software1
Circl
Circl
added 2023/01/13 8:31 p.m.10 views

CVE-2009-10002

creationtimestamp| type| source ---|---|--- 2023-01-13 20:31:13+00:00| seen| https://t.me/cibsecurity/56492...

6.1CVSS4.7AI score0.00536EPSS
Exploits0References1
CVE
CVE
added 2023/01/13 5:12 p.m.46 views

CVE-2009-10002

The CVE concerns dpup fittr-flickr, specifically the EXIF Preview Handler’s file fittr-flickr/features/easy-exif.js. The vulnerability is a cross-site scripting flaw introduced by unknown processing in that file, with remote initiation possible. Multiple sources (NVD, Red Hat, CVE lists, CNCVD/CN...

6.1CVSS4.5AI score0.00536EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2023/01/08 12:26 p.m.8 views

CVE-2007-10002

creationtimestamp| type| source ---|---|--- 2023-01-08 12:26:47+00:00| seen| https://t.me/cibsecurity/56135...

9.8CVSS7.8AI score0.0074EPSS
Exploits0References1
CVE
CVE
added 2023/01/08 9:18 a.m.58 views

CVE-2007-10002

CVE-2007-10002 affects the web-cyradm project, specifically the file auth.inc.php . The vulnerability is a SQL injection caused by manipulation of the arguments login/login_password/LANG , with the attack potentially being launched remotely. Multiple connected sources confirm the issue and cite t...

9.8CVSS8.9AI score0.0074EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/08 9:18 a.m.8 views

CVE-2007-10002 web-cyradm auth.inc.php sql injection

A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown functionality of the file auth.inc.php. The manipulation of the argument login/loginpassword/LANG leads to sql injection. The attack may be launched remotely. The name of the...

7.5CVSS9.9AI score0.0074EPSS
Exploits0References3
NVD
NVD
added 2023/01/03 9:15 a.m.16 views

CVE-2012-10002

A vulnerability was found in ahmyi RivetTracker. It has been declared as problematic. Affected by this vulnerability is the function changeColor of the file css.php. The manipulation of the argument setcss leads to cross site scripting. The attack can be launched remotely. The patch is named...

6.1CVSS4.5AI score0.00523EPSS
Exploits0References4
CVE
CVE
added 2023/01/03 8:22 a.m.44 views

CVE-2012-10002

CVE-2012-10002 affects ahmyi RivetTracker, specifically the changeColor function in css.php. The issue arises from manipulating the set_css argument, enabling cross-site scripting (XSS) via remote access. The vulnerability is documented across multiple sources with the same signature, including a...

6.1CVSS4.8AI score0.00523EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2023/01/01 4:16 p.m.85 views

CVE-2010-10002

The vulnerability CVE-2010-10002 affects the SimpleSAMLphp package, specifically the simplesamlphp-module-openid OpenID Handler. The issue is an input manipulation in the file templates/consumer.php (AuthState) that enables cross-site scripting. Exploitation can be performed remotely; the attack ...

6.1CVSS4.8AI score0.0064EPSS
Exploits0References4Affected Software1
Circl
Circl
added 2022/05/24 8:37 p.m.9 views

CVE-2013-10002

creationtimestamp| type| source ---|---|--- 2022-05-24 20:37:10+00:00| seen| https://t.me/cibsecurity/43285...

9.1CVSS8.6AI score0.00757EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/05/24 3:30 p.m.3 views

CVE-2013-10002 Telecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials...

6.5CVSS9.3AI score0.00757EPSS
Exploits0References2
CVE
CVE
added 2022/03/28 6:0 p.m.39 views

CVE-2015-10002

CVE-2015-10002 affects Kiddoware Kids Place, specifically the Home Button Protection feature. According to the consolidated sources, a vulnerability arises from repeated pressing of the Home Button Protection, leading to a local denial of service. The issue is documented across multiple feeds (NV...

5.5CVSS5.2AI score0.00196EPSS
Exploits0References1Affected Software1
Packet Storm
Packet Storm
added 2022/03/28 12:0 a.m.409 views

Backdoor.Win32.Avstral.e Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/35f0d754f161af35241cb081c73ea6dd.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Avstral.e Vulnerability: Unauthenticated Remote Command Execution Family: Avstral Typ...

Exploits0
Packet Storm
Packet Storm
added 2021/06/24 12:0 a.m.274 views

Trojan-Dropper.Win32.Krepper.a Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/ee699b4055c6199f9826681797d64f0b.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.Krepper.a Vulnerability: Unauthenticated Remote Command Execution Description:...

7.4AI score
Exploits0
Rows per page
Query Builder