96 matches found
Moodle-CVE-2018-1042
Moodle CVE-2018-1042 Script to exploit CVE-2018-1042 in order to do internal port scans...
ECHO-1042-C3BA-0F1F Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
CVE-2026-1042
creationtimestamp| type| source ---|---|--- 2026-01-20 07:47:35+00:00| seen| https://gist.github.com/Darkcrai86/eed07d9d953c2db56fefc884f7ab87c1...
Linux Distros Unpatched Vulnerability : CVE-2025-1042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2...
CVE-2025-38512
In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks in mesh networks This patch is a mitigation to prevent the A-MSDU spoofing vulnerability for mesh networks. The initial update to the IEEE 802.11 standard, in response to the FragAttacks, missed this...
CVE-2021-1042
In dsipaneldebugfsreadcmdset of dsipanel.c, there is a possible disclosure of freed kernel heap memory due to a use after free. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...
CVE-2025-1042
An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way...
CVE-2025-1042
creationtimestamp| type| source ---|---|--- 2025-02-12 15:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqn553u2h 2025-02-12 18:33:38+00:00| seen| https://t.me/cvedetector/17899...
CVE-2025-1042 vulnerabilities
Vulnerabilities for packages: gitlab-pages, gitlab-cng...
CVE-2025-1042
An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way...
CVE-2025-1042 Files or Directories Accessible to External Parties in GitLab
An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way...
CVE-2025-1042
Removed by vendor...
GitLab 15.7 < 17.6.5 / 17.7 < 17.7.4 / 17.8 < 17.8.2 (CVE-2025-1042)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories ...
WordPress WP Radio – Worldwide Online Radio Stations Directory for WordPress Plugin <= 3.1.9 is vulnerable to Broken Access Control
Software WP Radio – Worldwide Online Radio Stations Directory for WordPress Type Plugin Vulnerable versions = 3.1.9 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1042 Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership...
CVE-2024-1042
CVE-2024-1042 affects the WP Radio plugin for WordPress (versions up to 3.1.9). Description shows unauthorized modification of data via missing capability checks on several AJAX actions, allowing authenticated users with subscriber+ privileges to import stations, remove countries, and alter plugi...
CVE-2024-1042 WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions
The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 3.1.9. This makes it possible for authenticated...
CVE-2023-29156 Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID ODID messages which force the DroneScout ds230 Remote ID...
PT-2023-22174 · Dronescout · Dronescout Ds230
Name of the Vulnerable Software and Affected Versions: DroneScout ds230 versions 20211210-1627 through 20230329-1042 Description: The issue is an information loss vulnerability through traffic injection. An attacker can exploit this by injecting spoofed Open Drone ID ODID messages, forcing the...
MSC-2021-1042
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...