Lucene search
+L

91 matches found

Circl
Circl
added 2026/08/05 5:0 a.m.5 views

CVE-2019-1290

creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:09+00:00| seen| https://t.me/timcorehacking/604 2026-08-06 00:00:49+00:00| seen| https://t.me/timcorehacking/604...

9.3CVSS6.8AI score0.12476EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2026/03/10 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2026-1290)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.8AI score0.0035EPSS
SaveExploits1References2
Circl
Circl
added 2026/01/21 5:14 p.m.8 views

CVE-2026-1290

creationtimestamp| type| source ---|---|--- 2026-01-21 17:14:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcx6b2kmid2h...

5.3CVSS5AI score0.00311EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.6 views

MiracleLinux 8 : poppler-0.66.0-27.el8 (AXSA:2021-1290:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1290:01 advisory. poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc CVE-2019-14494 Tenable has extracted the preceding description...

7.5CVSS5.5AI score0.02679EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.6 views

MiracleLinux 7 : firefox-45.7.0-1.0.1.el7 (AXSA:2017-1290:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1290:01 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this...

9.8CVSS7.5AI score0.33199EPSS
SaveExploits16References10
RedhatCVE
RedhatCVE
added 2026/01/07 9:55 a.m.32 views

CVE-2025-1290

A race condition Use-After-Free vulnerability exists in the virtiotransportspaceupdate function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtiovsocksock structure during an AFVSOCK connect syscall can occur before a worker thread accesses it resulting in a...

8.1CVSS7AI score0.00262EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/01/07 6:36 a.m.8 views

EUVD-2026-1290

The NS IE Compatibility Fixer plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in all versions up to, and including, 2.1.5. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to modify the plugin'...

4.3CVSS5AI score0.00137EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2011-1290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in WebKit, as used on the Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in...

10CVSS6.2AI score0.09754EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:59 a.m.15 views

CVE-2024-1290

The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them to generate, and leak, valid password reset URLs, which they can use to take over any accounts...

6.5CVSS6.8AI score0.00554EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:5 a.m.12 views

CVE-2019-1290

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0787, CVE-2019-0788, CVE-2019-1291...

9.3CVSS8.1AI score0.12531EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:57 a.m.9 views

CVE-2012-1290

Cross-site scripting XSS vulnerability in b2b/auction/container.jsp in the Internet Sales crm.b2b module in SAP NetWeaver 7.0 allows remote attackers to inject arbitrary web script or HTML via the loadPage parameter...

4.3CVSS5.9AI score0.01148EPSS
SaveExploits0References1
Circl
Circl
added 2025/04/17 12:59 a.m.11 views

CVE-2025-1290

creationtimestamp| type| source ---|---|--- 2025-04-17 00:59:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12176 2025-04-17 02:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rx3zd52l 2025-04-17 03:40:08+00:00| seen|...

8.1CVSS4.8AI score0.00262EPSS
SaveExploits1References5
Patchstack
Patchstack
added 2024/03/12 12:0 a.m.13 views

WordPress Formidable Registration Plugin < 2.12 is vulnerable to Broken Authentication

Software Formidable Registration Type Plugin Vulnerable versions 2.12 Fixed in 2.12 OWASP Top 10 A4: Insecure Design Classification Broken Authentication CVE CVE-2024-1290 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID de229a590aad Credits Scott Kingsley Clark...

6.5CVSS6.4AI score0.00554EPSS
SaveExploits2References3Affected Software1
Circl
Circl
added 2024/03/11 7:27 p.m.8 views

CVE-2024-1290

creationtimestamp| type| source ---|---|--- 2024-03-11 19:27:19+00:00| seen| https://t.me/ctinow/204974...

6.5CVSS8.7AI score0.00554EPSS
SaveExploits2References1
CVE
CVE
added 2024/03/11 5:56 p.m.106 views

CVE-2024-1290

CVE-2024-1290 affects the WordPress Formidable Registration plugin (

6.5CVSS6.7AI score0.00554EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2024/03/11 5:56 p.m.41 views

CVE-2024-1290 Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover

The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them to generate, and leak, valid password reset URLs, which they can use to take over any accounts...

6.7AI score0.00554EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/03/11 5:56 p.m.20 views

CVE-2024-1290 Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover

The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them to generate, and leak, valid password reset URLs, which they can use to take over any accounts...

6.8AI score0.00554EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/03/03 11:31 p.m.51 views

CVE-2024-2151 SourceCodester Online Mobile Management Store Product Price logic error

A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors...

4.3CVSS5.1AI score0.00546EPSS
SaveExploits1References3
Circl
Circl
added 2023/03/09 6:20 p.m.9 views

CVE-2023-1290

creationtimestamp| type| source ---|---|--- 2023-03-09 18:20:33+00:00| seen| https://t.me/cibsecurity/59731...

9.8CVSS6.9AI score0.00763EPSS
SaveExploits1References1
CVE
CVE
added 2023/03/09 2:26 p.m.68 views

CVE-2023-1290

CVE-2023-1290 affects SourceCodester Sales Tracker Management System v1.0. A vulnerability in the file admin/clients/view_client.php arises from unsafely handling the id parameter, leading to an SQL Injection. Exploitation can be remote and has been publicly disclosed. Documented impact includes ...

9.8CVSS8.3AI score0.00763EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder