Lucene search
K

23 matches found

ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-14774

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and ma...

6.5CVSS6.5AI score0.00204EPSS
Exploits0References6Affected Software1
Circl
Circl
added 2026/06/03 6:1 a.m.10 views

CVE-2025-14774

creationtimestamp| type| source ---|---|--- 2026-06-03 06:01:01+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-545 2026-06-03 13:20:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf77v6mex2u...

7.4CVSS5.8AI score0.0018EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 3:56 p.m.10 views

CVE-2020-14774

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

7.5CVSS6.5AI score0.0153EPSS
Exploits0
CVE
CVE
added 2020/10/21 2:4 p.m.58 views

CVE-2020-14774

CVE-2020-14774 affects Oracle E-Business Suite CRM Technical Foundation (component: Preferences). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker, over HTTP, to cause a hang or a frequent crash (DoS) of Oracle CRM Technical Foundation. ...

7.5CVSS7.3AI score0.0153EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2019/08/08 8:15 p.m.26 views

CVE-2019-14774

The woo-variation-swatches aka Variation Swatches for WooCommerce plugin 1.0.61 for WordPress allows XSS via the wp-admin/admin.php?page=woo-variation-swatches-settings tab parameter...

6.1CVSS6.1AI score0.0102EPSS
Exploits1References2
CVE
CVE
added 2019/08/08 7:46 p.m.73 views

CVE-2019-14774

Vulnerability detail: The woo-variation-swatches (Variation Swatches for WooCommerce) WordPress plugin, version 1.0.61, is affected by a reflected XSS flaw in the admin settings endpoint wp-admin/admin.php?page=woo-variation-swatches-settings via the tab parameter. Impactfully, this allows script...

6.1CVSS6AI score0.0102EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2019/08/08 7:46 p.m.30 views

CVE-2019-14774

The woo-variation-swatches aka Variation Swatches for WooCommerce plugin 1.0.61 for WordPress allows XSS via the wp-admin/admin.php?page=woo-variation-swatches-settings tab parameter...

6.1AI score0.0102EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2019/04/29 12:0 a.m.32 views

Fedora Update for php-symfony FEDORA-2019-3ee6a7adf2

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.28 views

Fedora 28 : php-symfony (2018-9b54497b6e)

2.8.44 2018-08-01 - security cve-2018-14774 HttpKernel fix trusted headers management in HttpCache and InlineFragmentRenderer nicolas-grekas - security cve-2018-14773 HttpFoundation Remove support for legacy and risky HTTP headers nicolas-grekas - bug 28003 HttpKernel Fixes invalid REMOTEADDR in...

7.2CVSS7.4AI score0.58061EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/12/18 12:0 a.m.26 views

Fedora Update for php-symfony3 FEDORA-2018-66547a8c14

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.5AI score0.58061EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/08/15 12:0 a.m.25 views

Fedora Update for php-symfony3 FEDORA-2018-6f3ceeb7cb

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.9AI score0.58061EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/08/15 12:0 a.m.26 views

Fedora 27 : php-symfony (2018-4deae442f2)

2.8.44 2018-08-01 - security cve-2018-14774 HttpKernel fix trusted headers management in HttpCache and InlineFragmentRenderer nicolas-grekas - security cve-2018-14773 HttpFoundation Remove support for legacy and risky HTTP headers nicolas-grekas - bug 28003 HttpKernel Fixes invalid REMOTEADDR in...

7.2CVSS7.4AI score0.58061EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/08/15 12:0 a.m.22 views

Fedora Update for php-zendframework-zend-diactoros FEDORA-2018-4a606489ae

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.5AI score0.58061EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/08/15 12:0 a.m.16 views

Fedora Update for php-symfony3 FEDORA-2018-9c38d1dc1d

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.5AI score0.58061EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/08/15 12:0 a.m.19 views

Fedora Update for php-symfony FEDORA-2018-9b54497b6e

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.5AI score0.58061EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/08/06 12:0 a.m.62 views

Sensiolabs Symfony <= 2.7.48, 2.8.* <= 2.8.43, 3.* <= 3.3.17, 3.4.* <= 3.4.13, 4.0.* <= 4.0.13 and 4.1.* <= 4.1.2 Multiple Vulnerabilities

This host runs Symfony and is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.2CVSS6.6AI score0.58061EPSS
Exploits0References2
NVD
NVD
added 2018/08/03 5:29 p.m.14 views

CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should ...

7.2CVSS6.7AI score0.01146EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2018/08/03 5:29 p.m.20 views

CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should ...

7.2CVSS7AI score0.01146EPSS
Exploits0References2
OSV
OSV
added 2018/08/03 5:29 p.m.23 views

CVE-2018-14774

An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should ...

7.2CVSS6.9AI score0.01146EPSS
Exploits0References2
CVE
CVE
added 2018/08/03 5:0 p.m.76 views

CVE-2018-14774

CVE-2018-14774 affects Symfony HttpKernel, with vulnerable versions range: 2.7.0–2.7.48, 2.8.0–2.8.43, 3.3.0–3.3.17, 3.4.0–3.4.13, 4.0.0–4.0.13, and 4.1.0–4.1.2. When HttpCache is used, X-Forwarded-Host values are implicitly treated as trusted, enabling potential host header injection. Public upd...

7.2CVSS6.6AI score0.01146EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder