Lucene search
K

77 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.2 views

RHCOS 4 : Red Hat build of MicroShift 4.14.19 (RHSA-2024:1566)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1566 advisory. - golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Note that Nessus has not tested for this iss...

7.5CVSS7.2AI score0.01379EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/13 12:0 a.m.5 views

Amazon Linux 2023 : cargo-c (ALAS2023-2026-1566)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1566 advisory. tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As par...

8.1CVSS7.5AI score0.00019EPSS
Exploits2References6
EUVD
EUVD
added 2026/01/08 10:7 a.m.1 views

EUVD-2026-1566

When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcur...

5.3CVSS6.1AI score0.00061EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 2:33 a.m.4 views

CVE-2023-1566

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS7.6AI score0.00161EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:46 a.m.3 views

CVE-2025-1566

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions...

7.5CVSS7.4AI score0.00223EPSS
Exploits0References1
Circl
Circl
added 2025/04/16 11:58 p.m.3 views

CVE-2025-1566

creationtimestamp| type| source ---|---|--- 2025-04-16 23:58:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12173 2025-04-17 02:06:31+00:00| seen| https://t.me/cvedetector/23196 2025-04-17 02:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rxagaa2b...

7.5CVSS4.8AI score0.00223EPSS
Exploits0References3
Circl
Circl
added 2025/01/13 9:11 a.m.3 views

RHSA-2024:1566

creationtimestamp| type| source ---|---|--- 2025-01-13 09:11:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1356 2025-05-12 23:29:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16071...

4.8AI score
Exploits0References2
Circl
Circl
added 2024/03/14 8:32 p.m.0 views

CVE-2024-1566

creationtimestamp| type| source ---|---|--- 2024-03-14 20:32:13+00:00| seen| https://t.me/ctinow/208125...

6.5CVSS7.2AI score0.00312EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/28 8:33 a.m.19 views

CVE-2024-1566 Redirects <= 1.2.1 - Missing Authorization via save

The Redirects plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save function in all versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to change redirects created with this plugin. This could...

6.5CVSS6.5AI score0.00312EPSS
Exploits0References2
CVE
CVE
added 2024/02/28 8:33 a.m.98 views

CVE-2024-1566

The PatchSTACK entry confirms a concrete vulnerability in the WordPress Redirects plugin (versions up to and including 1.2.1). Root cause: missing capability check on the save function. Impact: unauthenticated attackers can modify redirects created with this plugin, enabling undesired redirection...

6.5CVSS6.5AI score0.00312EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.23 views

Rocky Linux 8 : container-tools:2.0 (RLSA-2022:1566)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1566 advisory. - A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby Docker...

7.5CVSS7.3AI score0.00508EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2023/04/06 12:0 a.m.51 views

Rocky Linux 8 : kernel (RLSA-2023:1566)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:1566 advisory. - A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress usi...

7.9CVSS7.2AI score0.50619EPSS
Exploits13References9
Tenable Nessus
Tenable Nessus
added 2023/04/05 12:0 a.m.94 views

RHEL 8 : kernel (RHSA-2023:1566)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1566 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: stack overflow in doprocdointv...

7.9CVSS7.7AI score0.50619EPSS
Exploits13References10
CVE
CVE
added 2023/03/22 1:31 p.m.94 views

CVE-2023-1566

The CVE-2023-1566 entry concerns SourceCodester Medical Certificate Generator App 1.0. The vulnerability is a SQL injection in the action.php file, triggered by manipulating the id parameter. It is exploitable remotely and has public exploit exposure (VDB-223558). Multiple connected sources corro...

9.8CVSS8.3AI score0.00161EPSS
Exploits1References3Affected Software1
Circl
Circl
added 2022/05/30 12:17 p.m.0 views

CVE-2022-1566

creationtimestamp| type| source ---|---|--- 2022-05-30 12:17:46+00:00| seen| https://t.me/cibsecurity/43530...

4.8CVSS4.9AI score0.00287EPSS
Exploits2References1
CVE
CVE
added 2022/05/30 8:35 a.m.81 views

CVE-2022-1566

The Quotes llama WordPress plugin (pre-1.0.0) is vulnerable due to lack of sanitisation/escaping of quotes, enabling stored Cross-Site Scripting by high-privilege admins (e.g., via regular input or CSV import). Impact is client-side script execution within admin/affected pages; remediation provid...

4.8CVSS4.8AI score0.00287EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2022/05/30 8:35 a.m.10 views

CVE-2022-1566 Quotes llama < 1.0.0 - Admin+ Stored Cross-Site Scripting

The Quotes llama WordPress plugin before 1.0.0 does not sanitise and escape Quotes, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed. The attack could also be performed by tricking an admin to import a malicious CS...

5.1AI score0.00287EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2022/04/28 12:0 a.m.32 views

Oracle Linux 8 : container-tools:2.0 (ELSA-2022-1566)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1566 advisory. - fixes CVE-2022-27649 podman - fixes CVE-2022-27651 Tenable has extracted the preceding description block directly from the Oracle Linux security...

7.5CVSS7.5AI score0.00508EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/04/27 12:0 a.m.26 views

CentOS 8 : container-tools:2.0 (CESA-2022:1566)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1566 advisory. - podman: Default inheritable capabilities for linux container should be empty CVE-2022-27649 - buildah: Default inheritable capabilities for linux...

7.5CVSS7.5AI score0.00508EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/19 12:0 a.m.35 views

Amazon Linux AMI : perl-Image-ExifTool (ALAS-2022-1566)

The version of perl-Image-ExifTool installed on the remote host is prior to 12.38-1.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1566 advisory. lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check. CVE-2022-23935 Tenable has extracted...

7.8CVSS7.3AI score0.27704EPSS
Exploits5References3
Rows per page
Query Builder