Lucene search
K

78 matches found

UbuntuCve
UbuntuCve
added 2026/05/29 12:0 a.m.4 views

CVE-2026-10009

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

7.5CVSS5.9AI score0.00102EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/29 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-10009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code...

7.5CVSS6.3AI score0.00102EPSS
Exploits0References3
Circl
Circl
added 2026/05/28 6:0 p.m.6 views

CVE-2026-10009

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

7.5CVSS5.8AI score0.00102EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.1 views

MiracleLinux 8 : glibc-2.28-251.el8_10.22 (AXSA:2025-10009:07)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10009:07 advisory. glibc: static setuid binary dlopen may incorrectly search LDLIBRARYPATH CVE-2025-4802 Tenable has extracted the preceding description block directly from th...

7.8CVSS7.6AI score0.00043EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.4 views

MiracleLinux 7 : openssh-7.4p1-11.el7 (AXSA:2017-1912:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1912:03 advisory. SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide...

7.8CVSS7.5AI score0.01579EPSS
Exploits6References4
RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.10 views

CVE-2020-10009

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions...

5.5CVSS5.8AI score0.00289EPSS
Exploits0References1
Circl
Circl
added 2025/09/22 12:45 p.m.5 views

CVE-2025-10009

creationtimestamp| type| source ---|---|--- 2025-09-22 12:45:14+00:00| seen| https://gist.github.com/Darkcrai86/00fd370bca4e97b1eb9455a4539f255c 2025-09-22 15:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzgpfhih5g2t...

8.6CVSS5.7AI score0.00145EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/05/27 12:0 a.m.21 views

ABB M2M Gateway Arbitrary Code Execution in embedded OpenSSH (CVE-2016-10009)

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket. This plugin only works with Tenable.ot. Please visit...

7.5CVSS7.5AI score0.01579EPSS
Exploits4References43
RedhatCVE
RedhatCVE
added 2025/05/22 12:26 a.m.4 views

CVE-2012-10009

A vulnerability was found in 404like Plugin up to 1.0.2 on WordPress. It has been classified as critical. Affected is the function checkPage of the file 404Like.php. The manipulation of the argument searchWord leads to sql injection. It is possible to launch the attack remotely. Upgrading to...

9.8CVSS7.7AI score0.0051EPSS
Exploits0References1
Circl
Circl
added 2025/05/20 4:40 p.m.0 views

CVE-2024-10009

creationtimestamp| type| source ---|---|--- 2025-05-20 16:40:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17001...

4.1CVSS4.8AI score0.00188EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/05/15 8:6 p.m.6 views

CVE-2024-10009 Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.6AI score0.00188EPSS
Exploits1References1
CVE
CVE
added 2025/05/15 8:6 p.m.21 views

CVE-2024-10009

The CVE-2024-10009 entry relates to the Melapress File Monitor WordPress plugin prior to version 2.1.0. The root cause is insufficient sanitization and escaping of a parameter used in an SQL statement, enabling an SQL injection attack by admins. Reported details across multiple sources confirm th...

4.1CVSS7.6AI score0.00188EPSS
Exploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/13 12:0 a.m.19 views

Siemens SCALANCE X-200RNA Switch Devices Untrusted Search Path (CVE-2016-10009)

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket. This plugin only works with Tenable.ot. Please visit...

7.5CVSS7.5AI score0.01579EPSS
Exploits4References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.22 views

Linux Distros Unpatched Vulnerability : CVE-2016-10009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by...

7.5CVSS7.3AI score0.01579EPSS
Exploits4References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.162 views

RHEL 6 : openssh (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssh: loading of untrusted PKCS11 modules in ssh-agent CVE-2016-10009 - openssh: scp allows command...

8.4AI score0.77091EPSS
Exploits38References15
Prion
Prion
added 2023/07/20 3:15 a.m.1187 views

Remote code execution

The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists because o...

7.5CVSS9.1AI score0.64352EPSS
Exploits13References19Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.48 views

Security Bulletin: Vulnerabilities in OpenSSH affect IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in OpenSSH. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in HTTPD. Vulnerability Details CVEID: CVE-2016-10011 Description...

7.8CVSS8.4AI score0.90046EPSS
Exploits22
CVE
CVE
added 2023/03/20 11:31 p.m.69 views

CVE-2012-10009

The CVE-2012-10009 entry describes a SQL injection in the 404like WordPress plugin (up to version 1.0.2) affecting the checkPage function in 404Like.php via the searchWord parameter. It can be exploited remotely and is classified as critical/high depending on source. The patch is to upgrade to ve...

9.8CVSS9AI score0.0051EPSS
Exploits0References4Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 6:33 p.m.135 views

K31440025: OpenSSH vulnerability CVE-2016-10009

Security Advisory Description Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket. CVE-2016-10009 Impact Running the ssh-agent program requires a...

7.5CVSS7.8AI score0.01579EPSS
Exploits4Affected Software23
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.3 views

SUSE CVE-2016-10009

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket...

7.3CVSS8AI score0.01579EPSS
Exploits4References17
Rows per page
Query Builder