CVE-2026-1558

creationtimestamp| type| source ---|---|--- 2026-02-27 05:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfsxinigxt2v...

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-1.61.1.11.11.AXS4 (AXSA:2013-428:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-428:03 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2013-0401 The Java Runtime Environment JRE component in Oracle Java SE ...

EUVD-2024-22135

Malicious code in bioql PyPI...

CVE-2022-1558

The Curtain WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2025-1558

creationtimestamp| type| source ---|---|--- 2025-03-24 16:39:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll56zwnlcg26 2025-03-24 18:24:33+00:00| seen| https://t.me/cvedetector/20981...

CVE-2025-1558 Denial of Service Via Malicious GIF

Mattermost Mobile Apps versions =2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF...

CVE-2025-1558 Denial of Service Via Malicious GIF

Mattermost Mobile Apps versions =2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF...

CVE-2025-1558

CVE-2025-1558 affects Mattermost Mobile Apps (versions ≤ 2.25.0). The root cause is improper validation of GIF images prior to rendering, which allows a remote attacker to crash the Android app via a message containing a specially crafted GIF. The vulnerability is described across multiple source...

CVE-2024-1558

A path traversal vulnerability exists in the createmodelversion function within server/handlers.py of the mlflow/mlflow repository, due to improper validation of the source parameter. Attackers can exploit this vulnerability by crafting a source parameter that bypasses the...

a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +162 more potentially affected by CVE-2024-1558 via mlflow (>=0.8.2 <=2.11.3)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =3.0.0, =0.1.0, =0.3.5, =0.8.0, =1.2.0, =1.9.30 and more Source cves: CVE-2024-1558 Source advisory: OSV:GHSA-J62R-WXQQ-F3GF...

CVE-2024-1558 Path Traversal Vulnerability in mlflow/mlflow

A path traversal vulnerability exists in the createmodelversion function within server/handlers.py of the mlflow/mlflow repository, due to improper validation of the source parameter. Attackers can exploit this vulnerability by crafting a source parameter that bypasses the...

Design/Logic Flaw

The POP3 service in YahooPOPs aka YPOPs! 1.6 allows a remote denial of service reboot via a long string to TCP port 110, a related issue to CVE-2004-1558...

CVE-2024-24736

The POP3 service in YahooPOPs aka YPOPs! 1.6 allows a remote denial of service reboot via a long string to TCP port 110, a related issue to CVE-2004-1558...

CVE-2023-1558

creationtimestamp| type| source ---|---|--- 2023-03-22 13:35:39+00:00| seen| https://t.me/cibsecurity/60433...

CVE-2023-1558

CVE-2023-1558 affects Simple and Beautiful Shopping Cart System 1.0. The vulnerability is in the uploadera.php component and enables unrestricted file upload, with remote initiation possible. Multiple connected sources confirm the issue and describe it as a critical vulnerability exploiting an up...

SUSE CVE-2013-1558

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans...

Security Bulletin: IBM Intelligent Operations Center 1.5 WebSphere Application Server - Oracle Java CPU April 2013

Abstract The Java vulnerabilities identified in the April 2013 Oracle Java security alert need to be fixed in IBM Intelligent Operations Center 1.5. The procedures in this security bulletin identify appropriate IBM patches for these Java vulnerabilities and directs how to apply them. No reference...

CVE-2022-1558

creationtimestamp| type| source ---|---|--- 2022-05-23 12:35:26+00:00| seen| https://t.me/cibsecurity/43143...

CVE-2022-1558

The Curtain WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2022-1558

The CVE-2022-1558 issue affects the Curtain WordPress plugin up to version 1.0.2. The vulnerability arises because certain plugin settings are not properly sanitized and escaped, enabling a Stored Cross-Site Scripting (XSS) attack when the unfiltered_html capability is disallowed. Affected compon...