26 matches found
CVE-2020-10049
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...
CVE-2025-10049
creationtimestamp| type| source ---|---|--- 2025-09-10 07:34:18+00:00| seen| Telegram/9KpW1oGaUMDJ3PoX8v0Zx84DOOie9JGx1fskjI4puSod0M...
WordPress Responsive Filterable Portfolio plugin <= 1.0.24 - Authenticated (Admin+) Arbitrary File Upload vulnerability
Authenticated Admin+ Arbitrary File Upload vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Responsive Filterable Portfolio versions = 1.0.24...
MAL-2025-10049 Malicious code in @zalastax/nolb-_grm (npm)
The package @zalastax/nolb-grm was found to contain malicious code...
CVE-2024-10049
The Edit WooCommerce Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2015-10049
A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched...
Linux Distros Unpatched Vulnerability : CVE-2016-10049
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service application cras...
Oracle Siebel CRM 16.x < 16.16 (July 2017 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the July 2017 CPU advisory. - Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM subcomponent: Search. Supported versions that are affected are 16.0 and 17.0. Easily...
CVE-2024-10049
creationtimestamp| type| source ---|---|--- 2024-10-18 07:43:01+00:00| seen| https://t.me/cvedetector/8289...
WordPress Edit WooCommerce Templates Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
Software Edit WooCommerce Templates Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10049 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b4d2a710a7c6 Credits Colin Xu...
SUSE CVE-2016-10049
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted RLE file...
CVE-2015-10049
creationtimestamp| type| source ---|---|--- 2023-01-15 20:13:09+00:00| seen| https://t.me/cibsecurity/56517...
CVE-2015-10049
The CVE-2015-10049 entry describes a Cross-Site Scripting vulnerability in Overdrive Eletrônica course-builder, affecting versions up to 1.7.x. The issue involves unknown functionality in the file coursebuilder/modules/oeditor/oeditor.html being manipulated to trigger XSS, with remote exploit via...
CVE-2020-10049
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...
CVE-2020-10049
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...
CVE-2020-10049
CVE-2020-10049 affects Siemens SIMATIC RTLS Locating Manager (all versions
CVE-2014-10049
CVE-2014-10049 entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-10049
...
CVE-2019-10049
It is possible for an attacker with regular user access to the web application of Pydio through 8.2.2 to trick an administrator user into opening a link shared through the application, that in turn opens a shared file that contains JavaScript code that is executed in the context of the victim use...
CVE-2019-10049
The CVE-2019-10049 entry concerns Pydio Core (versions up to 8.2.2) where a user with regular access can be manipulated into opening a shared file containing JavaScript that runs in the victim’s browser context, enabling leakage of sensitive data (e.g., session identifiers) and actions on behalf ...