CVE-2026-14657

creationtimestamp| type| source ---|---|--- 2026-07-05 00:04:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpubnxq57e2a...

WordPress Eventin plugin <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings' vulnerability

Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'postsettings' vulnerability discovered by Sarawut Poolkhet MisterHelloz in WordPress Plugin Eventin versions = 4.0.51...

CVE-2025-14657

creationtimestamp| type| source ---|---|--- 2026-01-09 08:38:20+00:00| seen| https://gist.github.com/Darkcrai86/b721e54658f7af1b4abf5246fc561373 2026-01-09 09:01:39+00:00| seen| Telegram/McZDz-QSSEXJogUpJoqFtqll3QxqzWp4PQCJiRiyMRSDEg 2026-01-09 09:06:09+00:00| seen|...

CVE-2025-14657 Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'

The Eventin – Event Manager, Events Calendar, Event Tickets and Registrations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'postsettings' function in all versions up to, and including, 4.0.51. This makes it possible for...

CVE-2019-14657

Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...

CVE-2020-14657

CVE-2020-14657 affects Oracle E-Business Suite, Oracle CRM Technical Foundation (Preferences component). Affected versions are 12.1.3 and 12.2.3–12.2.9. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to exploit with user interaction to gain unauthorized access to dat...

CVE-2019-14657

CVE-2019-14657 affects Yealink phones (through 2019-08-04) featuring an OpenVPN file upload where tar is executed as root to extract files without validating the extraction directory. An attacker can craft a tar containing ../../../../ to traverse directories and replace almost any file on the de...

CVE-2017-14657

This CVE entry is rejected and not used; it does not represent an active vulnerability entry.

CVE-2017-14657

...

RHEL 7 : Red Hat Single Sign-On 7.2.5 on RHEL 7 (RHSA-2018:3593)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3593 advisory. Red Hat Single Sign-On 7.2 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.2.5 security and bug fix update

A security update is now available for Red Hat Single Sign-On 7.2 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.2.5 on RHEL 7 security and bug fix update

New Red Hat Single Sign-On 7.2.5 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...