Lucene search
K

26 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:51 a.m.5 views

CVE-2020-10049

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

7.3CVSS6.9AI score0.00044EPSS
Exploits0References1
Circl
Circl
added 2025/09/10 7:34 a.m.1 views

CVE-2025-10049

creationtimestamp| type| source ---|---|--- 2025-09-10 07:34:18+00:00| seen| Telegram/9KpW1oGaUMDJ3PoX8v0Zx84DOOie9JGx1fskjI4puSod0M...

7.2CVSS4.8AI score0.00513EPSS
Exploits0
Patchstack
Patchstack
added 2025/09/09 11:58 p.m.4 views

WordPress Responsive Filterable Portfolio plugin <= 1.0.24 - Authenticated (Admin+) Arbitrary File Upload vulnerability

Authenticated Admin+ Arbitrary File Upload vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Responsive Filterable Portfolio versions = 1.0.24...

7.2CVSS6.8AI score0.00513EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-10049 Malicious code in @zalastax/nolb-_grm (npm)

The package @zalastax/nolb-grm was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:47 a.m.7 views

CVE-2024-10049

The Edit WooCommerce Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.4AI score0.01989EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:44 a.m.6 views

CVE-2015-10049

A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched...

6.1CVSS6.3AI score0.00251EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-10049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service application cras...

7.8CVSS7AI score0.00381EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:0 a.m.8 views

Oracle Siebel CRM 16.x < 16.16 (July 2017 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the July 2017 CPU advisory. - Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM subcomponent: Search. Supported versions that are affected are 16.0 and 17.0. Easily...

6.1CVSS6.9AI score0.00646EPSS
Exploits0References3
Circl
Circl
added 2024/10/18 7:43 a.m.2 views

CVE-2024-10049

creationtimestamp| type| source ---|---|--- 2024-10-18 07:43:01+00:00| seen| https://t.me/cvedetector/8289...

6.1CVSS4.8AI score0.01989EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/10/17 12:0 a.m.13 views

WordPress Edit WooCommerce Templates Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Edit WooCommerce Templates Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10049 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b4d2a710a7c6 Credits Colin Xu...

6.1CVSS5.6AI score0.01989EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:54 a.m.3 views

SUSE CVE-2016-10049

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted RLE file...

7.8CVSS9.1AI score0.00381EPSS
Exploits0References6
Circl
Circl
added 2023/01/15 8:13 p.m.1 views

CVE-2015-10049

creationtimestamp| type| source ---|---|--- 2023-01-15 20:13:09+00:00| seen| https://t.me/cibsecurity/56517...

6.1CVSS4.7AI score0.00251EPSS
Exploits0References1
CVE
CVE
added 2023/01/15 5:58 p.m.46 views

CVE-2015-10049

The CVE-2015-10049 entry describes a Cross-Site Scripting vulnerability in Overdrive Eletrônica course-builder, affecting versions up to 1.7.x. The issue involves unknown functionality in the file coursebuilder/modules/oeditor/oeditor.html being manipulated to trigger XSS, with remote exploit via...

6.1CVSS4.8AI score0.00251EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2020/09/09 7:15 p.m.3 views

CVE-2020-10049

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

7.3CVSS7.1AI score0.00044EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/09/09 6:6 p.m.10 views

CVE-2020-10049

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

7.1AI score0.00044EPSS
Exploits0References1
CVE
CVE
added 2020/09/09 6:6 p.m.54 views

CVE-2020-10049

CVE-2020-10049 affects Siemens SIMATIC RTLS Locating Manager (all versions

7.3CVSS7AI score0.00044EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/08/30 3:1 p.m.237 views

CVE-2014-10049

CVE-2014-10049 entry is rejected/not used and does not represent an active vulnerability.

6.7AI score
Exploits0
Cvelist
Cvelist
added 2019/08/30 3:1 p.m.9 views

CVE-2014-10049

...

Exploits0
OSV
OSV
added 2019/05/31 10:29 p.m.12 views

CVE-2019-10049

It is possible for an attacker with regular user access to the web application of Pydio through 8.2.2 to trick an administrator user into opening a link shared through the application, that in turn opens a shared file that contains JavaScript code that is executed in the context of the victim use...

7.3CVSS6.5AI score
Exploits0References1
CVE
CVE
added 2019/05/31 9:17 p.m.254 views

CVE-2019-10049

The CVE-2019-10049 entry concerns Pydio Core (versions up to 8.2.2) where a user with regular access can be manipulated into opening a shared file containing JavaScript that runs in the victim’s browser context, enabling leakage of sensitive data (e.g., session identifiers) and actions on behalf ...

7.3CVSS7AI score0.00282EPSS
Exploits3References1Affected Software1
Rows per page
Query Builder