Lucene search
K

10 matches found

OSV
OSV
added 2026/05/06 10:5 a.m.3 views

RHSA-2026:13839 Red Hat Security Advisory: nginx security update

Bulletin has no description...

8.2CVSS7.4AI score0.00064EPSS
Exploits0References23
RedhatCVE
RedhatCVE
added 2025/05/22 5:6 p.m.5 views

CVE-2020-13839

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 June 2020...

10CVSS7.7AI score0.00231EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/03/07 9:39 a.m.1 views

CVE-2024-13839

The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.5AI score0.00534EPSS
Exploits0References1
Circl
Circl
added 2025/03/05 9:35 a.m.2 views

CVE-2024-13839

creationtimestamp| type| source ---|---|--- 2025-03-05 09:35:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6523 2025-03-05 12:45:52+00:00| seen| https://t.me/cvedetector/19611...

6.1CVSS8.7AI score0.00534EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/05 9:21 a.m.6 views

CVE-2024-13839 Company Directory <= 4.3 - Reflected Cross-Site Scripting via add_query_arg Function

The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.5AI score0.00534EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/03/11 2:40 a.m.18 views

CVE-2021-21378 JWT authentication bypass with unknown issuer token

Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list when Envoy's JWT Authentication filter is configured with the allowmissing requirement under...

8.2CVSS8.5AI score0.00421EPSS
Exploits0References3
NVD
NVD
added 2020/06/05 12:15 a.m.21 views

CVE-2020-13839

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 June 2020...

10CVSS9.7AI score0.00231EPSS
Exploits0References1
CVE
CVE
added 2020/06/04 11:24 p.m.86 views

CVE-2020-13839

CVE-2020-13839 describes a buffer overflow in a custom AT command handler on LG mobile devices running Android OS 7.2, 8.x, 9, and 10 with MTK chipsets. The underlying issue is a code execution vulnerability caused by improper handling of AT commands, allowing an attacker to execute arbitrary cod...

10CVSS9.5AI score0.00231EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/04/03 6:0 a.m.62 views

CVE-2017-13839

CVE-2017-13839 affects macOS releases prior to 10.13 and concerns the Spotlight component. Local users could obtain results for other users’ files, indicating an information-disclosure/access-control issue within Spotlight’s indexing/search behavior. The vulnerability is documented in the NVD ent...

5.5CVSS5.7AI score0.00053EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2012/10/03 12:0 a.m.18 views

Fedora Update for ghostscript FEDORA-2012-13839

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.4AI score0.23786EPSS
Exploits0References2
Rows per page
Query Builder