Lucene search
K

18 matches found

Circl
Circl
added 2025/10/18 7:37 a.m.1 views

CVE-2025-10750

creationtimestamp| type| source ---|---|--- 2025-10-18 07:37:35+00:00| seen| Telegram/eGJZZVUYQLxZT79eBfMFY3lewF6gBUPhddGV90iaQ9lLeA...

5.3CVSS4.8AI score0.00127EPSS
Exploits0
Patchstack
Patchstack
added 2025/10/18 1:22 a.m.8 views

WordPress PowerBI Embed Reports plugin <= 1.2.0 - Unauthenticated Sensitive Information Disclosure vulnerability

Unauthenticated Sensitive Information Disclosure vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin PowerBI Embed Reports versions = 1.2.0...

5.3CVSS6.5AI score0.00127EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 6:59 a.m.5 views

CVE-2019-10750

deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a proto payload...

9.8CVSS6.7AI score0.00433EPSS
Exploits1References1
Circl
Circl
added 2024/11/04 3:33 a.m.0 views

CVE-2024-10750

creationtimestamp| type| source ---|---|--- 2024-11-04 03:33:27+00:00| seen| https://t.me/cvedetector/9681...

7.1CVSS6.2AI score0.00225EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2022/05/24 4:46 p.m.2 views

br.com.ingenieux:jbake-maven-plugin (>=0.0.3 <=0.0.9), br.com.jarch:jarch-apt (>=20.3.0 <=25.11.0) +449 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (>=1.7 <=3.10.7)

com.hazelcast:hazelcast MAVEN version =1.7, =0.0.3, =20.3.0, =24.2.0, =20.3.0, =2.23.5, =2.23.5, =23.1.0, =2.23.0, =2.23.5, =2.23.5, =2.23.5, =1.0.0, =1.0.0-final, =1.0.0-final, =1.3.0-final and more Source cves: CVE-2016-10750 Source advisory: OSV:GHSA-JV65-PF7V-F7P8...

8.1CVSS7.2AI score0.02816EPSS
Exploits1
CNVD
CNVD
added 2022/02/10 12:0 a.m.15 views

Tenda G1 and G3 Buffer Overflow Vulnerability (CNVD-2022-10750)

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 v15.11.0.179502CN suffers from a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the IPMacBindRule parameter...

7.8CVSS5.7AI score0.00346EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2020/12/16 12:0 a.m.86 views

JFrog < 7.11.1 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.11.1. It is, therefore, affected by multiple vulnerabilities: - A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This...

9.8CVSS7.6AI score0.07798EPSS
Exploits1References5
NVD
NVD
added 2020/06/19 8:15 p.m.11 views

CVE-2020-10750

Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials...

7.1CVSS0.0006EPSS
Exploits0References2
CVE
CVE
added 2020/06/19 7:23 p.m.70 views

CVE-2020-10750

CVE-2020-10750 affects jaegertracing/jaeger prior to version 1.18.1 when using the Kafka data store. The vulnerability allows an attacker with access to the container logs to reveal Kafka credentials stored in log files. Mitigation per the connected records is to upgrade to Jaeger v1.18.1 or late...

7.1CVSS5.3AI score0.0006EPSS
Exploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2020/06/19 4:20 p.m.4 views

Moderate: Red Hat Security Advisory: Red Hat OpenShift Jaeger 1.17.3 container images security update

An update for jaeger-all-in-one-rhel7-container, jaeger-collector-rhel7-container, and jaeger-ingester-rhel7-container is now available for Jaeger-1.17. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...

7.1CVSS6.7AI score0.0006EPSS
Exploits0References2
NVD
NVD
added 2019/08/23 5:15 p.m.5 views

CVE-2019-10750

deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a proto payload...

9.8CVSS9.3AI score0.00433EPSS
Exploits1References1
CVE
CVE
added 2019/08/23 4:50 p.m.105 views

CVE-2019-10750

CVE-2019-10750 relates to the npm package deeply. The vulnerability is a Prototype Pollution issue in versions before 3.1.0, where the function assign-deep can be tricked into adding or modifying properties on Object.prototype via a proto payload. The issue affects the library used to perform dee...

9.8CVSS9.2AI score0.00433EPSS
Exploits1References1Affected Software1
vulnersOsv
vulnersOsv
added 2019/06/20 3:47 p.m.3 views

configly (>=5.0.0 <=5.0.1) potentially affected by CVE-2019-10750 via deeply (=3.0.0)

deeply NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: SNYK:JS-DEEPLY-451026...

9.8CVSS7.2AI score0.00433EPSS
Exploits1
Circl
Circl
added 2019/05/22 2:48 p.m.4 views

CVE-2016-10750

creationtimestamp| type| source ---|---|--- 2019-05-22 14:48:08+00:00| seen| https://t.me/cvemitreorg/122 2019-05-22 18:29:12+00:00| seen| https://t.me/cibsecurity/4441 2024-01-07 04:08:28+00:00| seen| https://t.me/arpsyndicate/2611...

8.1CVSS7.2AI score0.02816EPSS
Exploits1References3
OSV
OSV
added 2019/05/22 2:29 p.m.29 views

CVE-2016-10750

In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code...

8.1CVSS7.6AI score
Exploits0References3
CVE
CVE
added 2019/05/22 1:40 p.m.138 views

CVE-2016-10750

CVE-2016-10750 is a Java deserialization RCE vulnerability in Hazelcast used by Atlassian Confluence Data Center when running in a clustered configuration. A remote, unauthenticated attacker can exploit the issue by sending a crafted JoinRequest to a Hazelcast instance listening on the cluster po...

8.1CVSS8.1AI score0.02816EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2018/05/04 6:0 p.m.46 views

CVE-2018-10750

Summary: CVE-2018-10750 affects the D-Link DSL-3782 EU 1.01 firmware. An authenticated user can supply a very long value to the /userfs/bin/tcapi binary via the staticGet function, triggering a buffer overflow that corrupts memory and can redirect program flow to execute arbitrary code. Several ...

9.3CVSS8.8AI score0.01448EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2017/07/05 7:0 p.m.53 views

CVE-2017-10750

Affected software: XnView Classic for Windows (version 2.40). The CVE describes arbitrary-code execution or denial of service via a crafted .rle file, linked to a memory write issue described as a “User Mode Write AV near NULL starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012....

7.8CVSS7.9AI score0.00081EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder