Lucene search
K

22 matches found

NVD
NVD
added 5 days ago8 views

CVE-2026-10239

A vulnerability was determined in JeecgBoot up to 3.9.2. The affected element is the function WordUtil.addImage of the file /airag/word/edit. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

6.5CVSS0.00043EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/01/09 9:54 a.m.8 views

CVE-2020-10239

An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of comfields allows access for non-superadmin users...

8.8CVSS7.5AI score0.11008EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/10/10 5:22 p.m.4 views

CVE-2025-10239

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes...

7.2CVSS7.2AI score0.00055EPSS
Exploits0References1
Circl
Circl
added 2025/10/09 2:7 p.m.3 views

CVE-2025-10239

creationtimestamp| type| source ---|---|--- 2025-10-09 14:07:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115344596566409110 2025-11-05 03:27:16+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m4u44yqvxk2g...

7.2CVSS7AI score0.00055EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/09 12:42 p.m.3 views

CVE-2025-10239 Unintended command execution via troubleshooting scripts in Progress Flowmon

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes...

7.2CVSS6.8AI score0.00055EPSS
Exploits0References1
NVD
NVD
added 2025/02/04 8:15 a.m.4 views

CVE-2024-10239

A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with administrator privileges can upload a specially crafted image, which can cause a stack overflow due to the unchecked fat-fsd.maxfld...

7.2CVSS0.001EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/04 8:2 a.m.9 views

CVE-2024-10239 fld->used_bytes without sanity check causes stack overflow

A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with administrator privileges can upload a specially crafted image, which can cause a stack overflow due to the unchecked fat-fsd.maxfld...

7.2CVSS7.6AI score0.001EPSS
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2020/12/21 12:0 a.m.13 views

Joomla! Remote Code Execution (CVE-2020-10238; CVE-2020-10239; CVE-2021-23132)

A remote code execution vulnerability exists in Joomla!. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.5CVSS8.6AI score0.58603EPSS
Exploits4
GithubExploit
GithubExploit
added 2020/03/21 8:40 a.m.7 views

Exploit for Incorrect Authorization in Joomla Joomla\!

Made by HK CVE-2020-10239: Incorrect Access Control in comf...

8.8CVSS8.6AI score0.11008EPSS
Exploits2
CVE
CVE
added 2020/03/16 3:45 p.m.140 views

CVE-2020-10239

CVE-2020-10239 affects Joomla! core prior to 3.9.16, where an Incorrect Access Control in the SQL fieldtype of com_fields may allow non‑superadmin users to access restricted data. Affected versions include 3.7.0–3.9.15; the issue is fixed in 3.9.16+. Some connected sources note a GitHub exploit P...

8.8CVSS8.8AI score0.11008EPSS
Exploits2References1Affected Software1
GithubExploit
GithubExploit
added 2020/03/05 4:23 a.m.200 views

Exploit for Exposure of Resource to Wrong Sphere in Joomla Joomla\!

Made by HK CVE-2020-10238: Incorrect Access Control in comt...

8.8CVSS8.6AI score0.12641EPSS
Exploits2
Circl
Circl
added 2019/06/17 6:33 p.m.1 views

CVE-2018-10239

creationtimestamp| type| source ---|---|--- 2019-06-17 18:33:25+00:00| seen| https://t.me/cibsecurity/4944...

7.2CVSS6.3AI score0.00043EPSS
Exploits0References1
CVE
CVE
added 2019/06/17 2:49 p.m.55 views

CVE-2018-10239

Infoblox NIOS 6.8–8.4.1 has a privilege-escalation in the "+support access" feature. A locally authenticated administrator could temporarily gain super-user scope if they know the current session’s support access code and the algorithm to derive the support password, provided the feature is enabl...

7.2CVSS6.8AI score0.00043EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/04/24 2:12 p.m.43 views

CVE-2019-10239

CVE-2019-10239 affects Robotronic RunAsSpc 3.7.0.0. The root cause is insufficient protection of stored credentials, enabling locally authenticated attackers under the same user context to obtain cleartext credentials from the stored account. The NVD entry records a low base score (CVSS2: 2.1, LO...

7.8CVSS7.3AI score0.00137EPSS
Exploits1References1Affected Software1
Openbugbounty
Openbugbounty
added 2017/08/21 8:18 p.m.8 views

gabba.up.pt XSS vulnerability

Vulnerable URL: http://gabba.up.pt/search/?q="/%3E%3Cimg src=x onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10239 VIP website status:| Yes Check...

6.3AI score
Exploits0
CVE
CVE
added 2017/08/08 3:0 p.m.65 views

CVE-2017-10239

CVE-2017-10239 affects Oracle VM VirtualBox Core, with vulnerable versions prior to 5.1.24. It is a local , high-privilege issue that can lead to a hang/DoS and unauthorized read/write access to VirtualBox data. CVSSv3 base score 7.3 (HIGH). Remediation: upgrade to at least 5.1.24; Mageia lists V...

7.3CVSS7.2AI score0.00061EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2017/07/19 12:0 a.m.39 views

Oracle VirtualBox Multiple Unspecified Vulnerabilities (Jul 2017) - Mac OS X

Oracle VirtualBox is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS7.4AI score0.0231EPSS
Exploits7References14
OpenVAS
OpenVAS
added 2017/07/19 12:0 a.m.37 views

Oracle VirtualBox Multiple Unspecified Vulnerabilities (Jul 2017) - Windows

Oracle VirtualBox is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS7.4AI score0.0231EPSS
Exploits7References14
Tenable Nessus
Tenable Nessus
added 2017/07/19 12:0 a.m.96 views

Oracle VM VirtualBox 5.1.x < 5.1.24 (July 2017 CPU)

The version of Oracle VM VirtualBox installed on the remote host is 5.1.x prior to 5.1.24. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified vulnerabilities exist in the Core component that allow a local attacker to have an impact on confidentiality, integrity, and...

8.8CVSS6.8AI score0.0231EPSS
Exploits7References17
CVE
CVE
added 2017/05/16 2:0 p.m.39 views

CVE-2016-10239

CVE-2016-10239 involves a potential bypass of the TrustZone access control policy in Android CAF builds using the Linux kernel. The description notes improper input validation that could cause an integer overflow, potentially leading to a buffer overflow and a buffer over-read. The NVD entry also...

9.3CVSS7.8AI score0.00063EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder