Lucene search
K

42 matches found

Tenable Nessus
Tenable Nessus
added 2025/11/07 12:0 a.m.1 views

Lexmark Printers Cross-site Request Forgery (CVE-2020-10095)

A vulnerability has been identified in the embedded web server used in Lexmark devices. The vulnerability allows the attacker to modify the configuration of the device. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503883; scriptversion"1.2";...

8.1CVSS6.6AI score0.00093EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:13 a.m.7 views

CVE-2019-10095

bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

10CVSS7.4AI score0.03018EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:39 a.m.3 views

CVE-2015-10095

A vulnerability classified as problematic has been found in woo-popup Plugin up to 1.2.2 on WordPress. This affects an unknown part of the file admin/class-woo-popup-admin.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.3...

6.1CVSS6.3AI score0.00404EPSS
Exploits0References1
Circl
Circl
added 2025/02/19 8:24 p.m.3 views

CVE-2020-10095

creationtimestamp| type| source ---|---|--- 2025-02-19 20:24:55+00:00| seen| https://t.me/cvedetector/18453 2025-02-19 22:06:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likrws4ly726 2025-02-20 17:48:19+00:00| seen|...

8.1CVSS5.7AI score0.00093EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/02/19 12:0 a.m.4 views

CVE-2020-10095

Various Lexmark devices have CSRF that allows an attacker to modify the configuration of the device...

8.1AI score0.00093EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/19 12:0 a.m.18 views

Progress Telerik UI for WPF 2024.4.1213 (CVE-2024-10095)

The version of Progress Telerik UI for WPF installed on the remote host is prior to 2024.4.1213. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10095 advisory. - In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible...

9.8CVSS6.3AI score0.00887EPSS
Exploits0References2
Circl
Circl
added 2024/12/16 7:2 p.m.4 views

CVE-2024-10095

creationtimestamp| type| source ---|---|--- 2024-12-16 19:02:42+00:00| seen| https://t.me/cvedetector/13024 2025-04-21 04:24:57+00:00| seen| https://t.me/CyberBulletin/10648 2025-04-21 06:24:57+00:00| seen| https://t.me/CyberBulletin/3086 2025-08-09 13:26:56+00:00| seen|...

9.8CVSS4.8AI score0.00887EPSS
Exploits0References3
NVD
NVD
added 2024/12/16 5:15 p.m.11 views

CVE-2024-10095

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

9.8CVSS0.00887EPSS
Exploits0References1
OSV
OSV
added 2024/12/16 5:15 p.m.0 views

CVE-2024-10095

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

9.8CVSS6.2AI score0.00887EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/16 4:59 p.m.30 views

CVE-2024-10095 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

8.4CVSS0.00887EPSS
Exploits0References1
CVE
CVE
added 2024/12/16 4:59 p.m.91 views

CVE-2024-10095

CVE-2024-10095 affects Progress Telerik UI for WPF. The vulnerability stems from an insecure deserialization pathway that can enable a code execution attack. Affected products are Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213). The connected sources consistently describe the issue as ...

9.8CVSS8.6AI score0.00887EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/16 4:59 p.m.16 views

CVE-2024-10095 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

8.4CVSS7.5AI score0.00887EPSS
Exploits0References1
Circl
Circl
added 2024/04/25 7:49 p.m.3 views

CVE-2018-10095

creationtimestamp| type| source ---|---|--- 2024-04-25 19:49:16+00:00| seen| https://t.me/arpsyndicate/4849...

6.1CVSS6.7AI score0.475EPSS
Exploits1References1
CVE
CVE
added 2023/03/06 8:31 p.m.47 views

CVE-2015-10095

The CVE-2015-10095 entry applies to the woo-popup WordPress plugin (versions up to 1.2.2) and involves an unknown part of the file admin/class-woo-popup-admin.php. The vulnerability enables cross-site scripting (XSS) and can be exploited remotely. The fixed version is 1.3.0, with the patch identi...

6.1CVSS4.8AI score0.00404EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2017-0199)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.02323EPSS
Exploits12References3
OSV
OSV
added 2021/09/02 5:15 p.m.15 views

CVE-2019-10095

bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

9.8CVSS9.7AI score
Exploits0References5
NVD
NVD
added 2021/09/02 5:15 p.m.14 views

CVE-2019-10095

bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

10CVSS0.03018EPSS
Exploits0References5
Cvelist
Cvelist
added 2021/09/02 12:0 a.m.21 views

CVE-2019-10095 bash command injection in spark interpreter

bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions...

9.8AI score0.03018EPSS
Exploits0References5
CVE
CVE
added 2021/09/02 12:0 a.m.93 views

CVE-2019-10095

Apache Zeppelin

10CVSS9.7AI score0.03018EPSS
Exploits0References5Affected Software1
OpenVAS
OpenVAS
added 2018/06/21 12:0 a.m.48 views

Fedora Update for mingw-libtiff FEDORA-2018-cc86e5bc77

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.02323EPSS
Exploits5References2
Rows per page
Query Builder