Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/12/13 12:58 p.m.2 views

CVE-2025-13506

Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database.This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1...

8.8CVSS7.1AI score0.0009EPSS
Exploits0References1
Circl
Circl
added 2025/12/12 12:56 p.m.2 views

CVE-2025-13506

creationtimestamp| type| source ---|---|--- 2025-12-12 12:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7s56ikt5g2c...

8.8CVSS5.8AI score0.0009EPSS
Exploits0References1
Circl
Circl
added 2025/02/11 11:15 a.m.2 views

CVE-2024-13506

creationtimestamp| type| source ---|---|--- 2025-02-11 11:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjsrhhua22 2025-02-11 13:11:14+00:00| seen| https://t.me/cvedetector/17705...

6.4CVSS7.3AI score0.00129EPSS
Exploits0References2
CVE
CVE
added 2025/02/11 11:10 a.m.34 views

CVE-2024-13506

CVE-2024-13506 : GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (WordPress)

6.4CVSS5.7AI score0.00129EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/02/11 11:10 a.m.10 views

CVE-2024-13506 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the displayname profile parameter in all versions up to, and including, 2.8.97 due to insufficient input sanitization and output escaping. This...

6.4CVSS0.00129EPSS
Exploits0References3
CVE
CVE
added 2020/09/29 8:8 p.m.36 views

CVE-2020-13506

CVE-2020-13506 is rejected/not used; this candidate was withdrawn and does not represent an active vulnerability entry.

6.8AI score
Exploits0
Cvelist
Cvelist
added 2020/09/29 8:8 p.m.9 views

CVE-2020-13506

...

Exploits0
Cvelist
Cvelist
added 2019/07/11 1:7 p.m.14 views

CVE-2019-13506

@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS...

6.2AI score0.0055EPSS
Exploits0References6
CVE
CVE
added 2019/07/11 1:7 p.m.67 views

CVE-2019-13506

CVE-2019-13506 affects @nuxt/devalue before 1.2.3 (used in Nuxt.js before 2.6.2). The root cause is mishandling of object keys, leading to Cross-Site Scripting (XSS). Impact: potential XSS via object keys in affected builds; CVSS ~6.1 (NVD v3). Mitigation: upgrade to @nuxt/devalue 1.2.3 or later ...

6.1CVSS6.1AI score0.0055EPSS
Exploits0References6Affected Software2
CVE
CVE
added 2018/07/09 6:0 a.m.33 views

CVE-2018-13506

The CVE-2018-13506 entry refers to a vulnerability in the SDR22 Ethereum token contract where the mintToken function contains an integer overflow. This overflow enables the contract owner to set the balance of an arbitrary user to any value. The affected component is the mintToken function within...

7.5CVSS7.7AI score0.00237EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder