Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:53 a.m.3 views

CVE-2020-10578

An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1...

7.5CVSS7AI score0.00399EPSS
Exploits1References1
OSV
OSV
added 2025/10/01 7:15 p.m.0 views

CVE-2025-10578

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write...

7.8CVSS5.8AI score0.00012EPSS
Exploits0References1
Circl
Circl
added 2025/10/01 6:59 p.m.1 views

CVE-2025-10578

creationtimestamp| type| source ---|---|--- 2025-10-01 18:59:40+00:00| seen| Telegram/OtxX7lYkv3bGQZ92ibjzJoj6z8zcgAWOFWrJWV0gGQF4M 2026-01-16 17:08:55+00:00| seen| Telegram/d6sB1RbJIYDMTp30Ju6izjGNWbns7tPpaDjV4ymv8cdWMvw...

7.8CVSS4.8AI score0.00012EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 10:25 a.m.5 views

CVE-2019-10578

Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017...

7.8CVSS7.2AI score0.00369EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:8 a.m.5 views

CVE-2024-10578

The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnewsimporterpluginactionfornotice function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level...

8.8CVSS6.5AI score0.51038EPSS
Exploits1References1
NVD
NVD
added 2024/12/06 6:15 a.m.11 views

CVE-2024-10578

The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnewsimporterpluginactionfornotice function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level...

8.8CVSS0.51038EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/12/06 5:26 a.m.11 views

CVE-2024-10578 Pubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation

The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnewsimporterpluginactionfornotice function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level...

8.8CVSS7.3AI score0.51038EPSS
Exploits1References3
CVE
CVE
added 2020/03/14 7:30 p.m.117 views

CVE-2020-10578

CVE-2020-10578 affects QCMS v3.0.1 with an arbitrary file read vulnerability in the file path system/controller/backend/template.php. Multiple connected sources (NVD, Red Hat, CNVD, CNVD CNVD-2020-19603, etc.) corroborate that an attacker can read files, leading to information disclosure. The des...

7.5CVSS7.4AI score0.00399EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2020/01/21 1:14 p.m.1 views

CVE-2019-10578

creationtimestamp| type| source ---|---|--- 2020-01-21 13:14:10+00:00| seen| https://t.me/cibsecurity/9292 2020-01-21 13:37:42+00:00| seen| https://t.me/cveNotify/353...

7.8CVSS7.5AI score0.00369EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/01/21 6:30 a.m.18 views

CVE-2019-10578

Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017...

8.1AI score0.00369EPSS
Exploits0References1
CVE
CVE
added 2020/01/21 6:30 a.m.90 views

CVE-2019-10578

The CVE-2019-10578 issue is a null pointer dereference that can occur while parsing a clip, affecting a broad set of Qualcomm Snapdragon products (Auto/Compute/Connectivity/IoT lines) and various SoCs (e.g., APQ8xxx, MSM/SDX families) as listed in the initial description. The root cause is a cras...

7.8CVSS8AI score0.00369EPSS
Exploits0References1Affected Software1
vulnersOsv
vulnersOsv
added 2019/02/18 11:51 p.m.1 views

@2fd/graphdoc (>=2.3.0 <=2.4.0), @alizain/coconut (>=0.2.3 <=0.2.4) +884 more potentially affected by CVE-2016-10578 via unicode (>=0.6.1 <=14.0.0)

unicode NPM version =0.6.1, =2.3.0, =0.2.3, =0.1.2, =0.0.1, =0.0.6, =0.2.0, =0.1.0, =5.8.0, =5.0.0, =1.0.0, =0.0.1, =2.4.0, =1.0.0, =0.1.0-latest.1a450bb3, =1.0.0, =1.1.2 and more Source cves: CVE-2016-10578 Source advisory: OSV:GHSA-QJF4-7642-C57P...

8.1CVSS7.2AI score0.00163EPSS
Exploits0
Cvelist
Cvelist
added 2018/05/29 8:0 p.m.10 views

CVE-2016-10578

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks...

8AI score0.00163EPSS
Exploits0References1
CVE
CVE
added 2018/05/29 8:0 p.m.52 views

CVE-2016-10578

CVE-2016-10578 concerns the unicode package used with Node.js. It states that unicode loads data from unicode.org and, prior to version 9.0.0, downloads binary resources over HTTP, enabling a network attacker to modify or read resources (MitM). According to connected advisories, this can lead to ...

8.1CVSS7.9AI score0.00163EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/05/02 9:0 p.m.40 views

CVE-2018-10578

The CVE affects WatchGuard AP100, AP102, AP200 (firmware &lt; 1.2.9.15) and AP300 (firmware

9.8CVSS9.4AI score0.00411EPSS
Exploits2References1Affected Software1
Circl
Circl
added 2009/12/21 12:0 a.m.2 views

CVE-2009-4817

creationtimestamp| type| source ---|---|--- 2009-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10578...

6.8CVSS5.8AI score0.03363EPSS
Exploits1References1
Rows per page
Query Builder