Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.7 views

CVE-2020-10039

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to...

8.1CVSS6.6AI score0.00523EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/21 12:28 p.m.5 views

CVE-2025-10039 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'ehcrmticketsingleviewclient' due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS5.2AI score0.00252EPSS
Exploits0References3
Circl
Circl
added 2025/10/30 9:52 p.m.1 views

CVE-2011-10039

creationtimestamp| type| source ---|---|--- 2025-10-30 21:52:57+00:00| seen| Telegram/mpKYWzWGHH-XvzOcsCuQ0bJ-kVEBraUrU1BwGv0BBfAWBRQ...

5.4CVSS4.8AI score0.00341EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/08/13 3:28 p.m.5 views

CVE-2012-10039

ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...

9.4CVSS8.5AI score0.02451EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:34 a.m.3 views

CVE-2015-10039

A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the library src/Complex.Domino.Lib/Lib/EntityFactory.cs. The manipulation leads to sql injection. Upgrading to version 0.1.5524.38553 is able to address this issue. Th...

8CVSS7.6AI score0.00702EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:46 a.m.6 views

CVE-2019-10039

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication...

9.8CVSS6.9AI score0.01868EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2024/11/25 7:40 p.m.2 views

be.jidoka:jdk-keycloak-admin (>=2.0.0 <=2.4.0), ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0 <=0.7.0) +679 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (>=1.0-alpha-1 <=26.0.5)

org.keycloak:keycloak-core MAVEN version =1.0-alpha-1, =2.0.0, =0.1.0, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.4.3, =1.4.3, =1.6.5 and more Source cves: CVE-2024-10039 Source advisory: OSV:GHSA-93WW-43RR-79V3...

5.7AI score0.00101EPSS
Exploits0
Circl
Circl
added 2024/11/22 9:53 a.m.2 views

CVE-2024-10039

creationtimestamp| type| source ---|---|--- 2024-11-22 09:53:24+00:00| seen| https://vulnerability.circl.lu/bundle/6dcc559a-77e3-4a18-986f-df02f894221c...

5.8AI score0.00101EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/11/21 7:23 p.m.19 views

Important: Red Hat Security Advisory: Red Hat build of Keycloak 24.0.9 Update

New Red Hat build of Keycloak 24.0.9 packages with security impact Important are available from the Customer Portal Red Hat build of Keycloak 24.0.9 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobi...

6.5CVSS6AI score0.01253EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/11/21 7:23 p.m.20 views

Important: Red Hat Security Advisory: Red Hat build of Keycloak 24.0.9 Images Update

New images with security impact Important are available for Red Hat build of Keycloak 24.0.9 and Red Hat build of Keycloak 24.0.9 Operator, running on OpenShift Container Platform. Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift...

6.5CVSS6AI score0.01253EPSS
Exploits0References6
Wolfi
Wolfi
added 2024/11/21 7:15 p.m.33 views

CVE-2024-10039 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-operator, keycloak-config-cli...

6.2AI score0.00101EPSS
Exploits0
CVE
CVE
added 2023/01/11 6:24 p.m.41 views

CVE-2015-10039

CVE-2015-10039 affects dobos domino, exploiting a vulnerability in the library file src/Complex.Domino.Lib/Lib/EntityFactory.cs that enables SQL injection. The issue is fixed by upgrading to version 0.1.5524.38553; the patch is identified as 16f039073709a21a76526110d773a6cce0ce753a. Patched versi...

8CVSS7AI score0.00702EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2020/07/14 2:15 p.m.2 views

CVE-2020-10039

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to...

8.1CVSS5.7AI score0.00523EPSS
Exploits0References1
NVD
NVD
added 2020/07/14 2:15 p.m.15 views

CVE-2020-10039

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to...

8.1CVSS0.00523EPSS
Exploits0References1
CVE
CVE
added 2020/07/14 1:18 p.m.55 views

CVE-2020-10039

CVE-2020-10039 affects Siemens SICAM MMU (all versions &lt; 2.05), SICAM SGU (all versions), and SICAM T (all versions

8.1CVSS7.7AI score0.00523EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2018/05/29 3:50 p.m.2 views

CVE-2013-10039

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioipexec.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

8.7CVSS5.7AI score0.03352EPSS
Exploits0References1
CVE
CVE
added 2018/04/18 2:0 p.m.40 views

CVE-2014-10039

CVE-2014-10039 affects Android on Qualcomm-based devices (Qualcomm MDM9625, SD 400, SD 800) where qsee_app_entry_return() is called without a preceding qsee_app_entry(). This can cause the stack to be restored to an older state and return to an unexpected location, with CRITICAL impact (CVSSv3: A...

10CVSS8.4AI score0.01252EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/08/08 3:29 p.m.16 views

CVE-2017-10039

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Web Client. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM...

6.8CVSS5.8AI score0.01624EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2012/04/02 12:0 a.m.17 views

Fedora Update for quake3 FEDORA-2011-10039

Check for the Version of quake3 OpenVAS Vulnerability Test Fedora Update for quake3 FEDORA-2011-10039 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

10CVSS6.3AI score0.0869EPSS
Exploits4References2
Atlassian
Atlassian
added 2009/04/21 1:28 a.m.12 views

Import Pages is not restricted to system admins

The Import pages actions is currently restricted to space admins not system admins like it should. Caused by CONF-10039...

2.7AI score
Exploits0Affected Software1
Rows per page
Query Builder