Lucene search
K

107 matches found

RedhatCVE
RedhatCVE
added 2026/01/27 9:23 a.m.7 views

CVE-2026-1429

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

5.4CVSS6.1AI score0.00021EPSS
Exploits0References1
OSV
OSV
added 2026/01/26 9:15 a.m.1 views

CVE-2026-1429

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

5.4CVSS6.1AI score0.00021EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/26 8:20 a.m.4 views

CVE-2026-1429 WellChoose|Single Sign-On Portal System - Reflected Cross-site Scripting

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

5.4CVSS6.1AI score0.00021EPSS
Exploits0References2
Circl
Circl
added 2026/01/26 7:33 a.m.2 views

CVE-2026-1429

creationtimestamp| type| source ---|---|--- 2026-01-26 07:33:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10655-59160-2.html 2026-01-26 09:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdcx4mgztz2j...

5.4CVSS5.7AI score0.00021EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.3 views

MiracleLinux 4 : mutt-1.5.20-2.20091214hg736b6a.AXS4.1 (AXSA:2011-711:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-711:01 advisory. Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features...

6.8CVSS8.1AI score0.00517EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/08 12:0 a.m.2 views

EUVD-2026-1429

Cross-Site Scripting XSS is present on the LoginID parameter on the /PSP/app/web/reg/regdisplay.asp endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34. Unsanitized user input is reflected in HTTP responses without proper HTML encoding or escaping. This allows attackers to...

6.1CVSS5.6AI score0.00028EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:12 a.m.13 views

CVE-2025-1429

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.6AI score0.0029EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/06/04 12:0 a.m.3 views

SUSE: Security Advisory (SUSE-SU-2025:1429-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS6.7AI score0.00226EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 2:59 a.m.2 views

CVE-2023-1429

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19...

5.4CVSS6.1AI score0.00017EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:7 a.m.9 views

CVE-2019-1429

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428...

7.6CVSS7AI score0.83036EPSS
Exploits3References1
CVE
CVE
added 2025/03/13 4:47 p.m.60 views

CVE-2025-1429

CVE-2025-1429 describes a heap-based overflow in Autodesk AutoCAD when parsing a malicious MODEL file. AFFECTED: AutoCAD (MODEL file parsing path). IMPACT: crash, potential data exposure, and arbitrary code execution in the context of the current process. EXPLOITATION: documents do not provide in...

7.8CVSS7.8AI score0.0029EPSS
Exploits0References3Affected Software1
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.209 views

CVE-2011-1429 affecting package mutt 2.2.12-1

CVE-2011-1429 affecting package mutt 2.2.12-1. No patch is available currently...

5.8CVSS6.4AI score0.00278EPSS
Exploits0
Packet Storm
Packet Storm
added 2024/09/01 12:0 a.m.201 views

JBoss Status Servlet Information Gathering

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'JBoss Status Servlet Information Gathering', 'Description' = %q This module queries the JBoss status servlet to collect sensitive information,...

5CVSS6.9AI score0.414EPSS
Exploits9
NVD
NVD
added 2024/04/18 5:15 a.m.6 views

CVE-2024-1429

The Element Pack Elementor Addons Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tablink’ attribute of the Panel Slider widget in all versions up to, and...

6.4CVSS5.7AI score0.00168EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/18 4:32 a.m.18 views

CVE-2024-1429 Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget

The Element Pack Elementor Addons Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tablink’ attribute of the Panel Slider widget in all versions up to, and...

6.4CVSS5.8AI score0.00168EPSS
Exploits0References2
Hacker One
Hacker One
added 2024/02/15 8:52 p.m.40 views

MTN Group: CVE-2010-1429 JBoss Insecure Storage of Sensitive Information on ips.mtn.co.ug

The JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allowed remote attackers to obtain sensitive information about deployed web contexts via a request to the status servlet, as demonstrated by a full=true query string. This issue was caused by a regression fr...

7.5CVSS7.1AI score0.94404EPSS
Exploits27
Circl
Circl
added 2024/02/05 2:16 p.m.4 views

CVE-2013-1429

creationtimestamp| type| source ---|---|--- 2024-02-05 14:16:51+00:00| seen| https://t.me/ctinow/179211...

6.3CVSS6.3AI score0.00786EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.21 views

Oracle Linux 6 : firefox (ELSA-2020-1429)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1429 advisory. - Added fix for mozbz1348168/CVE-2017-5428 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

9.8CVSS8.3AI score0.00812EPSS
Exploits1References4
Circl
Circl
added 2023/03/16 3:30 p.m.1 views

CVE-2023-1429

creationtimestamp| type| source ---|---|--- 2023-03-16 15:30:39+00:00| seen| https://t.me/cibsecurity/60119 2025-02-26 21:25:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5611...

5.4CVSS4.6AI score0.00017EPSS
Exploits1References2
NVD
NVD
added 2023/03/16 12:15 p.m.10 views

CVE-2023-1429

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19...

5.4CVSS4.5AI score0.00017EPSS
Exploits1References2
Rows per page
Query Builder