Linux Distros Unpatched Vulnerability : CVE-2018-1051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via Yaml.load in...

CVE-2025-1051

creationtimestamp| type| source ---|---|--- 2025-05-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-311/ 2025-06-02 19:36:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnjl6hk5li2 2025-09-01 18:48:20+00:0...

CVE-2020-1051

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1174, CVE-2020-1175, CVE-2020-1176...

CVE-2013-1051

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories...

WordPress List category posts Plugin <= 0.89.6 is vulnerable to Cross Site Scripting (XSS)

Software List category posts Type Plugin Vulnerable versions = 0.89.6 Fixed in 0.89.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1051 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a918041d1b8e Credits Ngô Thiên An ancor...

CVE-2024-1051

The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.89.6 due to insufficient input sanitization and output escaping on user supplied attributes like 'titletag'. This makes it possibl...

CVE-2024-1051 List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.89.6 due to insufficient input sanitization and output escaping on user supplied attributes like 'titletag'. This makes it possibl...

CVE-2024-1051

The CVE-2024-1051 issue affects the List category posts WordPress plugin, where the catlist shortcode is vulnerable to Stored XSS in all versions up to 0.89.6 due to insufficient input sanitization and output escaping. The vulnerability requires authenticated access (contributor-level and above) ...

CVE-2022-1051

creationtimestamp| type| source ---|---|--- 2023-12-16 13:37:30+00:00| seen| https://t.me/arpsyndicate/1824...

CVE-2023-1051

creationtimestamp| type| source ---|---|--- 2023-03-23 11:36:29+00:00| seen| https://t.me/cibsecurity/60541 2025-03-04 21:35:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6430...

CVE-2023-1051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in As Koc Energy Web Report System allows Reflected XSS. This issue affects Web Report System: before 23.03.10...

CVE-2023-1051 XSS in As Koc Web Report System

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in As Koc Energy Web Report System allows Reflected XSS. This issue affects Web Report System: before 23.03.10...

CVE-2023-1051

CVE-2023-1051 describes a reflected Cross-site Scripting vulnerability in the As Koc Energy Web Report System, due to improper neutralization of input during web page generation. Affected versions are prior to 23.03.10. The in-document sources consistently identify the issue as a Cross-site Scrip...

CVE-2017-1051

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2022-1051

The CVE-2022-1051 issue affects the WPQA Builder plugin for WordPress (versions before 5.2), used as a companion plugin for the Discy and Himer themes. The vulnerability stems from insufficient sanitization/escaping of city, phone, or profile credential fields when rendering the profile page, ena...

CVE-2022-1051 WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields

The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to perform Cross-Site Scripting attacks...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2 <=0.0.13), ca.vanzyl.concord:concord-k8s-server (>=0.0.1 <=0.0.10) +16 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.1.0.Beta1 <=3.6.0.CR1)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.1.0.Beta1, =0.0.2, =0.0.1, =0.0.8, =1.18.0, =1.38.0, =1.44.0, =1.37.0, =1.44.0, =1.0.0, =1.18.0, =1.0.0, =1.0.0, =0.0.27, =0.0.11, =0.0.27, =0.0.31 and more Source cves: CVE-2018-1051 Source advisory: OSV:GHSA-M2FV-3RQM-G7P5...

Huawei EulerOS: Security Advisory for python2 (EulerOS-SA-2022-1051)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : RHV-H and security update (redhat-virtualization-host) 4.3.14 (Moderate) (RHSA-2021:1051)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:1051 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host. Red Hat...

GHSA-2RFJ-2MWP-787V Chakra Scripting Engine Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...