Lucene search
+L

184 matches found

OpenVAS
OpenVAS
added 2026/02/02 12:0 a.m.2 views

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2026-1169)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS6.9AI score0.01245EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/07 8:26 p.m.5 views

EUVD-2026-1169

OpenLDAP Lightning Memory-Mapped Database LMDB mdbload contains a heap buffer underflow vulnerability in the readline function. When processing malformed input, an unsigned offset calculation can underflow a heap pointer, resulting in an out-of-bounds read of one byte before the allocated heap...

7CVSS6.1AI score0.00127EPSS
SaveExploits0References6
Circl
Circl
added 2025/12/19 5:0 a.m.8 views

CVE-2025-14495

creationtimestamp| type| source ---|---|--- 2025-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1169/...

7.8CVSS7.5AI score0.00179EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.8 views

e-point CMS 安全漏洞

e-point CMS is a content management system from e-point Poland. A security vulnerability exists in e-point CMS eagle.gsam-1169.1 version, which stems from the file upload feature not adequately validating archived content, which could lead to remote code execution...

4.3CVSS7.9AI score0.00268EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 2:31 a.m.6 views

CVE-2023-1169

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'fileuploadercallback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the...

4.3CVSS7.1AI score0.00573EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:19 p.m.6 views

CVE-2022-1169

There is a XSS vulnerability in Careerfy...

6.1CVSS6AI score0.00853EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2010-1169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does...

8.5CVSS7.6AI score0.04081EPSS
SaveExploits1References2
NVD
NVD
added 2025/02/11 3:15 a.m.9 views

CVE-2025-1169

A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated...

6.1CVSS0.00376EPSS
SaveExploits1References4
Circl
Circl
added 2025/02/11 2:52 a.m.11 views

CVE-2025-1169

creationtimestamp| type| source ---|---|--- 2025-02-11 02:52:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113982984927502829 2025-02-11 03:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuoyef5ui2v 2025-02-11 05:38:21+00:00| seen|...

6.1CVSS4.4AI score0.00376EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/02/11 2:31 a.m.21 views

CVE-2025-1169 SourceCodester Image Compressor Tool compressor.php cross site scripting

A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated...

5.1CVSS0.00376EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2024/05/07 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2024:1169-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.1AI score0.02242EPSS
SaveExploits3References6
OpenVAS
OpenVAS
added 2024/04/10 12:0 a.m.23 views

openSUSE: Security Advisory for util (SUSE-SU-2024:1169-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.8AI score0.02242EPSS
SaveExploits3References2
OSV
OSV
added 2024/03/07 11:15 a.m.8 views

CVE-2024-1169

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to unauthorized media upload due to a missing capability check on the buddyformsuploadhandledroppedmedia function in all versions up to, and...

7.5CVSS5.8AI score0.0058EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/07 11:1 a.m.40 views

CVE-2024-1169 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to unauthorized media upload due to a missing capability check on the buddyformsuploadhandledroppedmedia function in all versions up to, and...

7.5CVSS7.5AI score0.0058EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/03/07 12:0 a.m.16 views

WordPress BuddyForms Plugin <= 2.8.7 is vulnerable to Broken Access Control

Software BuddyForms Type Plugin Vulnerable versions = 2.8.7 Fixed in 2.8.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1169 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 9cb60e0ebc18 Credits Lucio Sá Required privilege...

7.5CVSS6.4AI score0.0058EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/06/09 6:15 a.m.21 views

CVE-2023-1169

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'fileuploadercallback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the...

4.3CVSS4.4AI score0.00573EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/06/09 5:33 a.m.22 views

CVE-2023-1169 OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'fileuploadercallback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the...

4.3CVSS4.8AI score0.00573EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/06/09 5:33 a.m.34 views

CVE-2023-1169 OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'fileuploadercallback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the...

4.3CVSS6.6AI score0.00573EPSS
SaveExploits0References3
CVE
CVE
added 2023/06/09 5:33 a.m.47 views

CVE-2023-1169

CVE-2023-1169 affects the WordPress plugin OoohBoi Steroids for Elementor . The root cause is a missing capability check in the function file_uploader_callback , allowing an unauthorised user with subscriber privileges to upload image attachments. Affected versions are up to and including 2.1.4 ;...

4.3CVSS4.4AI score0.00573EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/04/19 12:0 a.m.12 views

WordPress OoohBoi Steroids for Elementor Plugin <= 2.1.4 is vulnerable to Broken Access Control

Software OoohBoi Steroids for Elementor Type Plugin Vulnerable versions = 2.1.4 Fixed in 2.1.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-1169 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 71712d3348d5 Credits Ramuel Ga...

4.3CVSS6.8AI score0.00573EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder