Lucene search
K

14 matches found

Circl
Circl
added 2025/11/17 3:30 a.m.9 views

CVE-2025-13256

creationtimestamp| type| source ---|---|--- 2025-11-17 03:30:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sbw6zozf26...

8.8CVSS5.8AI score0.0003EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:21 a.m.4 views

CVE-2019-13256

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849...

7.8CVSS7AI score0.0012EPSS
Exploits1References1
NVD
NVD
added 2025/01/09 7:15 p.m.5 views

CVE-2024-13256

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

7.5CVSS0.00304EPSS
Exploits0References1
Circl
Circl
added 2025/01/09 7:13 p.m.5 views

CVE-2024-13256

creationtimestamp| type| source ---|---|--- 2025-01-09 19:13:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113799986024892307 2025-01-09 19:16:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1023 2025-01-09 19:16:22+00:00| seen|...

7.5CVSS5.8AI score0.00304EPSS
Exploits0References5
CVE
CVE
added 2025/01/09 7:3 p.m.47 views

CVE-2024-13256

CVE-2024-13256 concerns Drupal’s Email Contact module. The issue is an insufficent granularity of access control that can enable forceful browsing to the mail-sending form. Affected versions are 0.0.0 through 2.0.4. Potential impact is access restriction bypass, enabling an attacker to trigger em...

7.5CVSS6.7AI score0.00304EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/09 7:3 p.m.9 views

CVE-2024-13256 Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

0.00304EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 7:3 p.m.7 views

CVE-2024-13256 Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

6.9AI score0.00304EPSS
Exploits0References1
CVE
CVE
added 2019/07/04 3:6 p.m.49 views

CVE-2019-13256

Summary: CVE-2019-13256 affects XnView Classic 2.48 with a User Mode Write AV at xnview+0x000000000032e849. The NVD entry attributes a LOCAL, low-complexity path requiring user interaction (CVSS3: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 7.8. The vulnerability could impact confide...

7.8CVSS7.6AI score0.0012EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/07/04 3:6 p.m.14 views

CVE-2019-13256

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849...

7.7AI score0.0012EPSS
Exploits1References1
Exploit DB
Exploit DB
added 2018/08/02 12:0 a.m.29 views

Chartered Accountant : Auditor Website 2.0.1 - Cross-Site Scripting

Chartered Accountant : Auditor Website 2.0.1 - Cross-Site Scripting. CVE-2018-13256. Webapps exploit for PHP platform. Tags: Cross-Site Scripting XSS Exploit Title: Chartered Accountant : Auditor Website 2.0.1 - Reflected , Stored XSS Date: 26.06.2018 Site Titel : Find your needs on Domain Name...

6.1CVSS6.1AI score0.00234EPSS
Exploits4
0day.today
0day.today
added 2018/08/02 12:0 a.m.52 views

Chartered Accountant : Auditor Website 2.0.1 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Chartered Accountant : Auditor Website 2.0.1 - Reflected , Stored XSS Site Titel : Find your needs on Domain Name Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

0.00234EPSS
Exploits4
NVD
NVD
added 2018/07/09 12:29 p.m.22 views

CVE-2018-13256

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

6.1CVSS6.1AI score0.00234EPSS
Exploits4References2
CVE
CVE
added 2018/07/09 12:0 p.m.41 views

CVE-2018-13256

The CVE-2018-13256 issue affects the PHP Scripts Mall Auditor Website 2.0.1, where the firstname and lastname parameters are vulnerable to Cross‑Site Scripting (XSS). The connected sources describe both reflected and stored XSS vectors demonstrated in PoCs/exploits for version 2.0.1, confirming a...

6.1CVSS6AI score0.00234EPSS
Exploits4References2Affected Software1
CVE
CVE
added 2018/04/04 5:0 p.m.51 views

CVE-2017-13256

CVE-2017-13256 affects Android where the SDP server component (sdp_server.cc) contains an out-of-bounds write in process_service_search_attr_req due to a missing bounds check. This can enable remote code execution with no privileges and no user interaction. Affected Android versions include 5.1.1...

8.8CVSS8.5AI score0.00286EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder