Lucene search
K

25 matches found

Circl
Circl
added 2025/10/31 2:55 p.m.1 views

CVE-2011-10037

creationtimestamp| type| source ---|---|--- 2025-10-31 14:55:20+00:00| seen| Telegram/kPOecyhU3-eVWqdXP2K6pI7xSF83pMOaH75u-zkusFwjkrE...

5.4CVSS4.8AI score0.0071EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-10037

Malware in sbrugna...

4.3CVSS4.5AI score0.10498EPSS
Exploits0References3
Circl
Circl
added 2025/09/26 4:56 a.m.0 views

CVE-2025-10037

creationtimestamp| type| source ---|---|--- 2025-09-26 04:56:30+00:00| seen| Telegram/rgCiTBQk5j3hT1-87G2b0ItB8LCILL7X9aJ8STd8bDRXXM...

4.9CVSS4.8AI score0.00029EPSS
Exploits0
Patchstack
Patchstack
added 2025/09/25 11:46 p.m.3 views

WordPress Featured Image from URL (FIFU) plugin <= 5.2.7 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by ifoundbug in WordPress Plugin Featured Image from URL versions = 5.2.7...

4.9CVSS7.8AI score0.00029EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/11 2:54 p.m.7 views

CVE-2012-10037 PhpTax pfilez Parameter Exec Remote Code Injection

PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely passed to the exec function without sanitization. A remote attacker can inject arbitrary shell commands, leading to code execution under the web server's context. No...

9.3CVSS0.62552EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 12:44 a.m.5 views

CVE-2015-10037

A vulnerability, which was classified as critical, was found in ACIEscola. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 34eed1f7b9295d1424912f79989d8aba5de41e9f. It is recommended to apply a patch to fix this issue. The identifier VDB-21796...

9.8CVSS7.6AI score0.00297EPSS
Exploits0References1
Circl
Circl
added 2025/03/25 3:18 p.m.2 views

CVE-2024-10037

creationtimestamp| type| source ---|---|--- 2025-03-25 15:18:53+00:00| seen| https://t.me/cvedetector/21096 2025-03-31 16:33:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9694 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-01...

5.9CVSS4.8AI score0.00216EPSS
Exploits0References3
ICS
ICS
added 2025/03/25 12:30 p.m.9 views

Hitachi Energy RTU500 Series (Update B)

SUMMARY Hitachi Energy is aware of the vulnerabilities, CVE-2024-10037, CVE-2024-11499, CVE-2024-12169, and CVE-2025-1445 in the RTU500 Web server component, the IEC 60870-5-104 controlled station implementation and IEC 61850 implementation, that affects the RTU500 versions that are listed...

8.7CVSS6.3AI score0.00216EPSS
Exploits0References9
CVE
CVE
added 2025/03/25 12:22 p.m.78 views

CVE-2024-10037

CVE-2024-10037 affects Hitachi Energy RTU500 web server component and can cause a denial of service to the RTU500 CMU application when a specially crafted WebSocket message sequence is processed. Exploitation requires proper authentication and the RTU500 test mode to be enabled; the affected CMU ...

5.9CVSS6.8AI score0.00216EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/25 12:22 p.m.3 views

CVE-2024-10037

A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message sequence is executed on a WebSocket connection. An attacker must be properly authenticated and the test mode function of RTU500 must be enabled...

5.9CVSS6.6AI score0.00216EPSS
Exploits0References1
CVE
CVE
added 2023/01/11 6:36 a.m.39 views

CVE-2015-10037

CVE-2015-10037 affects ACI_Escola with a SQL injection vulnerability in an unspecified part. Reported as critical (CVSS v3.1: 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The issue is mitigated by applying patch 34eed1f7b9295d1424912f79989d8aba5de41e9f, and the vulnerability is associated with VDB-...

9.8CVSS7.9AI score0.00297EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/11 6:36 a.m.17 views

CVE-2015-10037 ACI_Escola sql injection

A vulnerability, which was classified as critical, was found in ACIEscola. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 34eed1f7b9295d1424912f79989d8aba5de41e9f. It is recommended to apply a patch to fix this issue. The identifier VDB-21796...

5.5CVSS9.9AI score0.00297EPSS
Exploits0References3
CNVD
CNVD
added 2022/02/09 12:0 a.m.19 views

Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-10037)

Reolink Rlc-410W is a Wifi security camera from Reolink China.Reolink RLC-410W has a security vulnerability that can be exploited by attackers to cause a denial of service...

8.6CVSS4.7AI score0.00151EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.35 views

Siemens SICAM MMU, SICAM T, and SICAM SGU Out-of-Bounds Read (CVE-2020-10037)

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information. This...

7.5CVSS7.2AI score0.00322EPSS
Exploits0References3
OSV
OSV
added 2020/07/14 2:15 p.m.1 views

CVE-2020-10037

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information...

7.5CVSS5.7AI score0.00322EPSS
Exploits0References1
NVD
NVD
added 2020/07/14 2:15 p.m.9 views

CVE-2020-10037

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information...

7.5CVSS0.00322EPSS
Exploits0References1
Circl
Circl
added 2018/05/29 3:50 p.m.4 views

CVE-2012-10037

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phptaxexec.rb 2025-08-11 18:01:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw5evxceg52p 2025-10-23 21:12:56+00:0...

9.3CVSS5.7AI score0.62552EPSS
Exploits0References2
OSV
OSV
added 2017/10/19 5:29 p.m.1 views

CVE-2017-10037

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware subcomponent: Web Service API. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI...

7.5CVSS7.3AI score
Exploits0References3
CVE
CVE
added 2017/10/19 5:0 p.m.66 views

CVE-2017-10037

CVE-2017-10037 is a vulnerability in Oracle Fusion Middleware’s Oracle BI Publisher (Web Service API subcomponent). Affected are BI Publisher versions 11.1.1.7.0 and 11.1.1.9.0. An unauthenticated attacker with network access via HTTP can compromise BI Publisher, potentially enabling unauthorized...

7.5CVSS7.4AI score0.0212EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/10/18 12:0 a.m.91 views

Oracle Business Intelligence Publisher Multiple Vulnerabilities (October 2017 CPU)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.171017 or 11.1.1.9.x prior to 11.1.1.9.171017. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CV...

9.8CVSS7.5AI score0.8038EPSS
Exploits4References6
Rows per page
Query Builder