Lucene search
K

99 matches found

Circl
Circl
added 2026/01/29 10:10 p.m.3 views

CVE-2026-1457

creationtimestamp| type| source ---|---|--- 2026-01-29 22:10:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlsjgk6lb2i 2026-01-30 11:20:51+00:00| seen| https://gist.github.com/alon710/882fe599fd3c2bd7bed0a297fb7ecfe9...

8.8CVSS4.8AI score0.00104EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/08 9:17 a.m.2 views

EUVD-2026-1457

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in magentech Rozy - Flower Shop rozy allows PHP Local File Inclusion.This issue affects Rozy - Flower Shop: from n/a through = 1.2.25...

9.8CVSS6.6AI score0.00066EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.3 views

CVE-2025-1457

The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Wrapper Link, Countdown and Gallery widgets in all versions up to, and including, 5.10.28 due to insufficient input sanitization...

6.4CVSS5.9AI score0.00335EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/19 12:1 a.m.3 views

WordPress Element Pack Elementor Addons plugin <= 5.10.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Element Pack Elementor Addons versions = 5.10.28...

6.4CVSS6.3AI score0.00335EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2025/02/11 2:18 a.m.3 views

CVE-2024-1457

creationtimestamp| type| source ---|---|--- 2025-02-11 02:18:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrslt5k2z...

7AI score
Exploits0References1
Circl
Circl
added 2025/02/06 2:44 a.m.0 views

CVE-2018-1457

creationtimestamp| type| source ---|---|--- 2025-02-06 02:44:20+00:00| seen| Telegram/qNNANTx98P1NfLCpdnKQvojpwuIDvU-RoUQ1kNIXRES5RLA...

9.8CVSS4.8AI score0.00367EPSS
Exploits0
NVD
NVD
added 2023/03/25 9:15 p.m.13 views

CVE-2023-1457

A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the component Static Routing Configuration Handler. The manipulation of the argument next-hop-interface leads to command injection. It is possible to launch the...

9.8CVSS8.2AI score0.01633EPSS
Exploits0References2
CVE
CVE
added 2023/03/25 12:0 a.m.45 views

CVE-2023-1457

CVE-2023-1457 affects Ubiquiti EdgeRouter X 2.0.9-hotfix.6. The vulnerability is in the Static Routing Configuration Handler, where manipulating the next-hop-interface argument leads to command injection. It can be exploited remotely; some sources note the public exploit and dispute the vulnerabi...

9.8CVSS9.8AI score0.01633EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.1 views

SUSE CVE-2012-1457

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal aka Cat QuickHeal 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot...

4.3CVSS6.8AI score0.50848EPSS
Exploits0References6
CVE
CVE
added 2022/04/25 9:40 a.m.80 views

CVE-2022-1457

CVE-2022-1457 corresponds to a stored XSS vulnerability in the FacturaScripts project neorazorx/facturascripts, affecting the title parameter on EditUser and EditProducto pages prior to 2022.04. The issue allows an attacker to inject scripts that can exfiltrate data or compromise user sessions, w...

9CVSS5.8AI score0.00374EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/04/25 9:40 a.m.14 views

CVE-2022-1457 Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascripts

Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the...

9CVSS5.6AI score0.00374EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2012:0858-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.6AI score0.7955EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.9 views

SUSE: Security Advisory (SUSE-SU-2019:1457-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.8AI score0.54077EPSS
Exploits5References2
NVD
NVD
added 2021/04/29 6:15 p.m.12 views

CVE-2021-1457

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS0.00138EPSS
Exploits0References1
CVE
CVE
added 2021/04/29 5:30 p.m.62 views

CVE-2021-1457

Cisco Firepower Management Center (FMC) Web-based management interface contains multiple cross-site scripting (XSS) vulnerabilities due to insufficient input validation. An unauthenticated, remote attacker can lure a user to click a crafted link, causing arbitrary script execution in the user’s b...

4.8CVSS5AI score0.00138EPSS
Exploits0References1Affected Software1
ThreatPost
ThreatPost
added 2020/08/06 1:2 p.m.199 views

Black Hat 2020: 'Zero-Click' MacOS Exploit Chain Uses Microsoft Office Macros

A new “zero-click” MacOS exploit chain could allow attackers to deliver malware to MacOS users using a Microsoft Office document with macros. The attack bypasses security measures that both Microsoft and Apple have put in place to protect MacOS users from malicious macros. The exploit chain,...

6.8CVSS7.4AI score0.05058EPSS
Exploits0References16
Prion
Prion
added 2020/07/27 7:15 p.m.21 views

Remote code execution

A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457...

6.8CVSS7.7AI score0.26234EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/07/27 6:50 p.m.99 views

CVE-2020-1457

CVE-2020-1457 is described across the provided documents as a remote code execution vulnerability in the Microsoft Windows Codecs Library, related to how memory objects are handled. The vulnerability is cited by multiple sources (NVD entry, CVE lists) with the same core description: memory handli...

7.8CVSS7.8AI score0.1667EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/07/27 6:50 p.m.20 views

CVE-2020-1457

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425...

7.9AI score0.1667EPSS
Exploits0References2
Circl
Circl
added 2020/07/01 2:16 p.m.2 views

CVE-2020-1457

creationtimestamp| type| source ---|---|--- 2020-07-01 14:16:02+00:00| seen| https://t.me/truesecator/716 2020-07-02 07:21:19+00:00| seen| https://t.me/informationsecuritychannel/38909 2020-07-06 08:19:08+00:00| seen| https://t.me/SecLabNews/7991 2020-07-27 22:55:18+00:00| seen|...

7.8CVSS7.7AI score0.1667EPSS
Exploits0References4
Rows per page
Query Builder