Lucene search
K

70 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:19 p.m.6 views

CVE-2022-1613

The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations in certain situations...

5.3CVSS6.6AI score0.0018EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:14 p.m.7 views

CVE-2012-1613

Cross-site scripting XSS vulnerability in editonepic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter...

3.5CVSS5.4AI score0.02134EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:40 a.m.6 views

CVE-2015-1613

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the 1 updaterepo, 2 getlocks, or 3 getusergroups API method...

4CVSS6.2AI score0.00176EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/26 4:43 a.m.7 views

CVE-2025-1613

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URLfilterCfg of the component URL Filtering Submenu. The manipulation of the argument urlIP leads to cross site scripting. The attack...

4.8CVSS3.3AI score0.00068EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/02/26 12:0 a.m.8 views

RockyLinux 9 : nodejs:22 (RLSA-2025:1613)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:1613 advisory. undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083 nodejs:...

7.7CVSS6.5AI score0.00605EPSS
Exploits0References7
Circl
Circl
added 2025/02/24 3:25 a.m.10 views

CVE-2025-1613

creationtimestamp| type| source ---|---|--- 2025-02-24 03:25:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5121 2025-02-24 06:15:11+00:00| seen| https://t.me/cvedetector/18777 2025-02-24 06:32:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3livq2kfcdv2t 2025-02-24...

4.8CVSS3.9AI score0.00068EPSS
Exploits0References3
NVD
NVD
added 2025/02/24 3:15 a.m.5 views

CVE-2025-1613

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URLfilterCfg of the component URL Filtering Submenu. The manipulation of the argument urlIP leads to cross site scripting. The attack...

4.8CVSS0.00068EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/02/24 3:0 a.m.9 views

CVE-2025-1613 FiberHome AN5506-01A ONU GPON URL Filtering Submenu URL_filterCfg cross site scripting

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URLfilterCfg of the component URL Filtering Submenu. The manipulation of the argument urlIP leads to cross site scripting. The attack...

4.8CVSS0.00068EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/19 12:0 a.m.13 views

Oracle Linux 9 : nodejs:22 (ELSA-2025-1613)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1613 advisory. - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 Tenable has extracted the preceding description blo...

7.7CVSS6.6AI score0.00605EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/02/18 12:0 a.m.11 views

AlmaLinux 9 : nodejs:22 (ALSA-2025:1613)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:1613 advisory. undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083 nodejs: GOAW...

7.7CVSS6.5AI score0.00605EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:0 a.m.19 views

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

6.7CVSS5.8AI score0.00063EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.23 views

Debian: Security Advisory (DSA-2115-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.01245EPSS
Exploits0References3
Circl
Circl
added 2022/09/26 4:22 p.m.0 views

CVE-2022-1613

creationtimestamp| type| source ---|---|--- 2022-09-26 16:22:06+00:00| seen| https://t.me/cibsecurity/50483 2025-05-21 19:42:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17177...

5.3CVSS5.5AI score0.0018EPSS
Exploits2References2
CVE
CVE
added 2022/09/26 12:35 p.m.63 views

CVE-2022-1613

The CVE-2022-1613 issue affects the Restricted Site Access WordPress plugin (versions before 7.3.2). The root cause is the plugin prioritizing certain HTTP headers over PHP’s REMOTE_ADDR when obtaining a visitor IP, enabling bypass of IP-based restrictions in some scenarios. The vulnerability is ...

5.3CVSS5.1AI score0.0018EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2022/09/26 12:35 p.m.18 views

CVE-2022-1613 Restricted Site Access < 7.3.2 - Access Bypass via IP Spoofing

The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations in certain situations...

5.5AI score0.0018EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2022/05/05 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2022-1613)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.00765EPSS
Exploits1References2
NVD
NVD
added 2020/04/08 8:15 p.m.14 views

CVE-2020-1613

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

8.6CVSS8.5AI score0.00453EPSS
Exploits0References1
CVE
CVE
added 2020/04/08 7:25 p.m.50 views

CVE-2020-1613

The CVE describes a vulnerability in Juniper Junos OS BGP FlowSpec handling where receiving a specific FlowSpec advertisement can terminate an established BGP session. Affected products include Junos OS versions listed in the CVE (e.g., 12.3, 12.3X48, 14.1X53, 15.1R7-S5 and earlier, 16.1R7-S7 and...

8.6CVSS7.7AI score0.00453EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/03/11 10:0 p.m.60 views

CVE-2019-1613

CVE-2019-1613 affects Cisco NX-OS CLI command handling, enabling an authenticated, local attacker to inject and execute arbitrary commands due to insufficient argument validation. Affected are multiple Cisco platforms: MDS 9000 series (pre-6.2(27) and 8.2(3)); Nexus 3000 (pre-7.0(3)I4(9) and 7.0(...

6.7CVSS5.7AI score0.00063EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2018/12/27 12:0 a.m.29 views

Debian: Security Advisory (DLA-1613-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.2AI score0.13522EPSS
Exploits1References3
Rows per page
Query Builder