Joomla! Component Sweetykeeper 1.5 - Local File Inclusion

A directory traversal vulnerability in the Sweety Keeper comsweetykeeper component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1474 info: name: Joomla! Compone...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

CVE-2015-1474_poc

Questo codice è inteso come un tentativo di PoC per CVE-2015-1474. Il codice è basato sul codice del comando screencap, ma genera un parcel dannoso che causa il crash del surfaceflinger quando viene deserializzato. Vedi maggiori informazioni su...

CVE-2026-1474

creationtimestamp| type| source ---|---|--- 2026-01-27 19:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdghuozbou2n...

CVE-2025-1474

In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user accou...

CVE-2022-1474

The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in an attribute on the event dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2025-1474

In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user accou...

CVE-2025-1474 Weak Password Requirements in mlflow/mlflow

In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user accou...

CVE-2025-1474 Weak Password Requirements in mlflow/mlflow

In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user accou...

CVE-2023-1474

creationtimestamp| type| source ---|---|--- 2025-02-26 19:24:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5576...

CVE-2019-1474

creationtimestamp| type| source ---|---|--- 2024-03-09 14:46:28+00:00| seen| https://t.me/ctinow/203954...

CVE-2024-1474

creationtimestamp| type| source ---|---|--- 2024-02-21 17:22:07+00:00| seen| https://t.me/ctinow/189794 2024-02-21 17:31:27+00:00| seen| https://t.me/ctinow/189808 2024-02-22 19:12:57+00:00| seen| https://t.me/arpsyndicate/4008 2024-03-13 09:11:50+00:00| seen| https://t.me/ctinow/206478...

CVE-2024-1474

In WSFTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WSFTP Server administrative interface...

CVE-2024-1474 WS_FTP Server Reflected Cross-Site Scripting in Administrative Interface

In WSFTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WSFTP Server administrative interface...

CVE-2024-1474 WS_FTP Server Reflected Cross-Site Scripting in Administrative Interface

In WSFTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WSFTP Server administrative interface...

CVE-2024-1474

WS_FTP Server prior to 8.8.5 is affected by reflected cross-site scripting in the administrative interface, arising from handling of various user-supplied inputs. The issue is documented across multiple sources as a vulnerability in WS_FTP Server versions before 8.8.5. A remediation action is to ...

CVE-2023-1474 SourceCodester Automatic Question Paper Generator System GET Parameter manage_question_paper.php sql injection

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/questionpapers/managequestionpaper.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1474 SourceCodester Automatic Question Paper Generator System GET Parameter manage_question_paper.php sql injection

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/questionpapers/managequestionpaper.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1474

CVE-2023-1474 affects SourceCodester Automatic Question Paper Generator System 1.0, specifically the GET Parameter Handler in users/question_papers/manage_question_paper.php. The root cause is improper handling of the id parameter, enabling SQL injection remotely; exploits have been disclosed pub...

Debian: Security Advisory (DSA-1474-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...