31 matches found
CVE-2015-10147
creationtimestamp| type| source ---|---|--- 2025-10-29 13:31:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4dknyy4u32o...
CVE-2025-10147
creationtimestamp| type| source ---|---|--- 2025-09-23 09:02:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lziktbd6mr2o 2026-07-15 06:46:38+00:00| seen| https://social.cologne/users/pterlisten/statuses/116922646376124395 2026-07-15 06:48:17+00:00| seen|...
WordPress Podlove Podcast Publisher plugin <= 4.2.6 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Podlove Podcast Publisher versions = 4.2.6...
CVE-2024-10147
creationtimestamp| type| source ---|---|--- 2024-11-16 03:25:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113490494122187280 2024-11-16 06:02:41+00:00| seen| https://t.me/cvedetector/11222...
CVE-2024-10147
CVE-2024-10147 (Steel WordPress plugin) is a stored XSS in the btn shortcode affecting all versions up to 1.3.0, caused by insufficient input sanitization and output escaping on user-supplied attributes. The vulnerability allows authenticated attackers with contributor-level access or higher to i...
CVE-2024-10147 Steel <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn Shortcode
The Steel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...
CVE-2024-10147 Steel <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via btn Shortcode
The Steel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...
WordPress Steel Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
Software Steel Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10147 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1c80ca24b74c Credits Francesco Carlucci Required privile...
CVE-2019-10147
creationtimestamp| type| source ---|---|--- 2019-06-04 08:15:07+00:00| seen| https://t.me/SecLabNews/5053...
CVE-2019-10147
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are not limited by cgroups during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
UBUNTU-CVE-2019-10147
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are not limited by cgroups during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
CVE-2019-10147
CVE-2019-10147 affects rkt (through version 1.30.0). The issue is that containers started with rkt enter are not isolated by cgroups during stage 2, allowing processes run within those containers to access host resources. The connected documents reiterate that this limitation can enable compromis...
CVE-2018-10147
CVE-2018-10147 is rejected/not used per the Initial Description; it does not represent an active vulnerability entry.
kernel, perf, python security update
CentOS Errata and Security Advisory CESA-2017:1842 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Oracle Linux 7 : kernel (ELSA-2017-1842-1) (Stack Clash)
The remote Oracle Linux host is missing a security update for the kernel packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2017-1842-1. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc';...
CVE-2017-10147
CVE-2017-10147 affects Oracle WebLogic Server (Fusion Middleware Core Components). Affected installations include Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. The issue allows an unauthenticated attacker with network access via the T3 protocol to compromise the WebLo...
RedHat Update for kernel RHSA-2017:1842-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : kernel (RHSA-2017:1842)
"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1842 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An use-after-free flaw was found in t...
Adobe Digital Editions Memory Corruption Vulnerability (CNVD-2017-10147)
Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. A remote attacker can exploit this...