Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/01/06 12:19 a.m.10 views

CVE-2025-15448

A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. This impacts the function Upload of the file src/main/java/com/macro/mall/controller/MinioController.java. The manipulation results in unrestricted upload. It is possible to launch the attack...

6.5CVSS6.7AI score0.00324EPSS
Exploits1References1
Circl
Circl
added 2026/01/05 2:0 a.m.2 views

CVE-2025-15448

creationtimestamp| type| source ---|---|--- 2026-01-05 02:00:25+00:00| seen| Telegram/AmPVmelrxIl50u8IlRUDueLAHAApWSFgGJcVw4tzAB3HFGg 2026-01-05 04:55:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbnnjjve262c...

9.8CVSS6.2AI score0.00324EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/01/05 12:2 a.m.3 views

CVE-2025-15448 cld378632668 JavaMall MinioController.java upload unrestricted upload

A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. This impacts the function Upload of the file src/main/java/com/macro/mall/controller/MinioController.java. The manipulation results in unrestricted upload. It is possible to launch the attack...

6.5CVSS6.5AI score0.00324EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/01/05 12:2 a.m.27 views

CVE-2025-15448 cld378632668 JavaMall MinioController.java upload unrestricted upload

A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. This impacts the function Upload of the file src/main/java/com/macro/mall/controller/MinioController.java. The manipulation results in unrestricted upload. It is possible to launch the attack...

6.5CVSS0.00324EPSS
Exploits1References4
Circl
Circl
added 2024/02/20 10:46 a.m.2 views

CVE-2019-15448

creationtimestamp| type| source ---|---|--- 2024-02-20 10:46:32+00:00| seen| https://t.me/ctinow/188332...

7.8CVSS7.5AI score0.0031EPSS
Exploits0References1
NVD
NVD
added 2023/03/29 7:15 p.m.32 views

CVE-2022-36978

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Notification...

9.8CVSS9.8AI score0.07334EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.19 views

CVE-2022-36978

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Notification...

9.8CVSS9.9AI score0.07334EPSS
Exploits0References2
CVE
CVE
added 2023/03/29 12:0 a.m.54 views

CVE-2022-36978

Ivanti Avalanche 6.3.2.3490 is affected. The vulnerability resides in the Notification Server service and stems from improper validation of user-supplied data, leading to deserialization of untrusted data and remote code execution in the service account context. Authentication is required to expl...

9.8CVSS9.8AI score0.07334EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/05/27 8:13 p.m.45 views

CVE-2020-15448

CVE-2020-15448 is rejected/not used and does not represent an active vulnerability entry.

6.9AI score
Exploits0
Cvelist
Cvelist
added 2021/05/27 8:13 p.m.9 views

CVE-2020-15448

...

Exploits0
CVE
CVE
added 2019/11/14 4:27 p.m.41 views

CVE-2019-15448

CVE-2019-15448 affects the Samsung S7 Edge on Android 8.0.0 (build samsung/hero2ltexx/hero2lte:8.0.0/R16NW/G935FXXS4ESC3) where the pre-installed app com.samsung.android.themecenter (versionCode 7000000, versionName 7.0.0.0) exposes an accessible component that lets other pre-installed apps perfo...

7.8CVSS7.3AI score0.0031EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2018/11/08 7:0 p.m.11 views

CVE-2018-15448 Cisco Registered Envelope Service Information Disclosure Vulnerability

A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to an insecu...

5.3CVSS6.5AI score0.02222EPSS
Exploits0References2
CVE
CVE
added 2018/11/08 7:0 p.m.43 views

CVE-2018-15448

Cisco Registered Envelope Service suffers an information-disclosure vulnerability where an insecure configuration enables improper indexing, allowing unauthenticated, remote attackers to discover sensitive user data (e.g., usernames) via search engines. The root cause is misconfiguring indexing o...

7.5CVSS5.9AI score0.02222EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2018/01/23 5:0 p.m.27 views

CVE-2017-15448

This CVE entry is rejected/not used and does not represent an active vulnerability.

7.4AI score
Exploits0
Cvelist
Cvelist
added 2018/01/23 5:0 p.m.9 views

CVE-2017-15448

...

Exploits0
Rows per page
Query Builder