Lucene search
+L

115 matches found

Kitploit
Kitploit
•added 2026/10/03 12:07 a.m.•10 views

keycloak__keycloak_CVE-2022-1274_20-0-3

Keycloak Keycloak هو حل مفتوح المصدر لإدارة الهوية والوصول Identity and Access Management للتطبيقات والخدمات الحديثة. يحتوي هذا المستودع على الكود المصدري لخادم Keycloak، والمحولات adapters الخاصة بجافا ومحول JavaScript. المساعدة والوثائق الوثائق القائمة البريدية للمستخدمين - القائمة البريدية...

5.4CVSS6.8AI score0.00698EPSS
SaveExploits0References11
OSV
OSV
•added 2026/07/01 3:39 p.m.•18 views

ECHO-FADD-120A-1274

Bulletin has no description...

4.3CVSS5.6AI score0.00245EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:34 p.m.•25 views

CVE-2026-1274

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel...

4.9CVSS5.5AI score0.003EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/22 11:30 p.m.•50 views

CVE-2026-1274

IBM Guardium Data Protection 12.0, 12.1, and 12.2 are affected by CVE-2026-1274, a Bypass Business Logic vulnerability in the access management control panel (CWE-840). The IBM bulletin lists the affected versions and provides version-specific fixes via Fix Central bundles for 12.0, 12.1, and 12....

4.9CVSS5.9AI score0.003EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/04/22 4:42 p.m.•14 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-1272, CVE-2020-16971, CVE-2026-1274)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-1272 DESCRIPTION: IBM Guardium Data Protection is vulnerable to Security Misconfiguration vulnerability in the user access control panel. CWE:CWE-613: Insufficient Session...

9.1CVSS7.4AI score0.04266EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/01/07 6:35 a.m.•24 views

EUVD-2026-1274

The Bit Form – Contact Form Plugin plugin for WordPress is vulnerable to unauthorized workflow execution due to missing authorization in the triggerWorkFlow function in all versions up to, and including, 2.21.6. This is due to a logic flaw in the nonce verification where the security check only...

6.5CVSS5.3AI score0.00416EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2015-1274

Malware in sbrugna...

7.2CVSS5.8AI score0.00562EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/23 10:06 a.m.•21 views

CVE-2024-1274

The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks depending on the permissions set by the admin...

5.4CVSS6.1AI score0.00425EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:14 p.m.•21 views

CVE-2020-1274

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266,...

9.3CVSS7.7AI score0.16405EPSS
SaveExploits0
Circl
Circl
•added 2025/04/16 1:56 p.m.•16 views

CVE-2025-1274

creationtimestamp| type| source ---|---|--- 2025-04-16 13:56:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12047...

7.8CVSS4.8AI score0.00226EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 9:15 p.m.•31 views

CVE-2025-1274

A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS0.00226EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/15 8:58 p.m.•10 views

CVE-2025-1274 RCS File Parsing Out-of-Bounds Write Vulnerability

A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00226EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/03/17 12:00 a.m.•13 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2025-1274)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7AI score0.27935EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/02 6:15 a.m.•14 views

CVE-2024-1274

The My Calendar WordPress plugin before 3.4.24 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks depending on the permissions set by the admin...

5.4CVSS5.8AI score0.00425EPSS
SaveExploits2References1
CVE
CVE
•added 2024/04/02 5:15 a.m.•133 views

CVE-2024-1274

The My Calendar WordPress plugin is vulnerable to Cross-Site Scripting (XSS) in versions prior to 3.4.24 . The root cause is the failure to sanitize and escape certain parameters, which allows users with privileges as low as Subscriber to perform XSS attacks, depending on administrative permissio...

5.4CVSS5.2AI score0.00425EPSS
SaveExploits2References1Affected Software1
Circl
Circl
•added 2023/04/17 4:41 p.m.•17 views

CVE-2023-1274

creationtimestamp| type| source ---|---|--- 2023-04-17 16:41:56+00:00| seen| https://t.me/cibsecurity/62281 2025-03-03 19:30:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6251...

6.5CVSS7.2AI score0.009EPSS
SaveExploits2References2
NVD
NVD
•added 2023/04/17 1:15 p.m.•26 views

CVE-2023-1274

The Pricing Tables For WPBakery Page Builder formerly Visual Composer WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks...

6.5CVSS6.4AI score0.009EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2023/04/17 12:17 p.m.•6 views

CVE-2023-1274 Pricing Tables For WPBakery Page Builder < 3.0 - Subscriber+ LFI

The Pricing Tables For WPBakery Page Builder formerly Visual Composer WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks...

6.3AI score0.009EPSS
SaveExploits2References1
CVE
CVE
•added 2023/04/17 12:17 p.m.•249 views

CVE-2023-1274

CVE-2023-1274 affects the WordPress plugin Pricing Tables For WPBakery Page Builder (formerly Visual Composer) up to version 3.0. The issue is caused by insufficient validation of shortcode attributes, which are used to generate file paths passed to include functions. This allows authenticated us...

6.5CVSS6.6AI score0.009EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2023/04/13 12:00 a.m.•18 views

WordPress Pricing Tables For WPBakery Page Builder Plugin < 3.0 is vulnerable to Local File Inclusion

Software Pricing Tables For WPBakery Page Builder Type Plugin Vulnerable versions 3.0 Fixed in 3.0 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-1274 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID d6cfa024a462 Credits Lana Codes Required...

6.5CVSS6.8AI score0.009EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder