Lucene search
+L

105 matches found

vulnersOsv
vulnersOsv
•added 2026/07/07 4:03 p.m.•4 views

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-11201 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-11201 Source advisory: OSV:PYSEC-2026-1640...

9.8CVSS7.4AI score0.26282EPSS
SaveExploits1
CVE
CVE
•added 2026/02/18 6:42 a.m.•39 views

CVE-2026-1640

CVE-2026-1640 affects the WordPress Taskbuilder plugin (versions

4.3CVSS5.9AI score0.00294EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/18 6:42 a.m.•18 views

CVE-2026-1640

The Taskbuilder – WordPress Project Management & Task Management plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.0.2. This is due to missing authorization checks on the project and task comment submission functions AJAX actions:...

4.3CVSS5.7AI score0.00294EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-1640

Malware in sbrugna...

7.2CVSS7.2AI score0.01719EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/23 8:23 a.m.•20 views

CVE-2024-1640

The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form plugin for WordPress is vulnerable to unauthorized modification of data due to a insufficient user validation on the bitformsupdateformentry AJAX action in all versions up to, and...

5.3CVSS6.7AI score0.00481EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:55 a.m.•22 views

CVE-2011-1640

The ethernet-lldp component in Cisco IOS 12.2 before 12.233SXJ1 does not properly support a large number of LLDP Management Address MA TLVs, which allows remote attackers to cause a denial of service device crash via crafted LLDPDUs, aka Bug ID CSCtj22354...

7.8CVSS7.3AI score0.01768EPSS
SaveExploits0References1
Circl
Circl
•added 2025/02/25 12:28 a.m.•21 views

CVE-2025-1640

creationtimestamp| type| source ---|---|--- 2025-02-25 00:28:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5238 2025-02-25 02:00:37+00:00| published-proof-of-concept| Telegram/1CImXu8tsf4dMepL-2nWQhANlvGZCRZxowG6e9Ap6B7cI 2025-02-25 02:19:25+00:00| seen|...

9.8CVSS7.3AI score0.0064EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/02/25 12:00 a.m.•45 views

CVE-2025-1640 Benner ModernaNet JS_CarregaCombo sql injection

A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file...

7.5CVSS0.0064EPSS
SaveExploits1References4
Microsoft KB
Microsoft KB
•added 2024/08/02 12:00 a.m.•48 views

March 9, 2021—KB5000812 (OS Build 15063.2679)

March 9, 2021—KB5000812 OS Build 15063.2679 Applies To Windows 10, version 1703, all editions Note NEW 3/9/21 End of support for Windows 10, version 1703 IMPORTANT This release, dated March 9, 2021, is the final security update for Windows 10, version 1703 on Surface Hub. To continue receiving...

7.8CVSS6.7AI score0.00953EPSS
SaveExploits0
Patchstack
Patchstack
•added 2024/03/13 12:00 a.m.•29 views

WordPress Bit Form – Contact Form Plugin Plugin <= 2.10.1 is vulnerable to Insecure Direct Object References (IDOR)

Software Bit Form – Contact Form Plugin Type Plugin Vulnerable versions = 2.10.1 Fixed in 2.10.2 OWASP Top 10 A4: Insecure Design Classification Insecure Direct Object References IDOR CVE CVE-2024-1640 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 608867152d52 Credits...

5.3CVSS6.4AI score0.00481EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•65 views

openSUSE: Security Advisory for opera (openSUSE-SU-2022:0156-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.1AI score0.13921EPSS
SaveExploits4References4
Circl
Circl
•added 2023/03/27 2:39 a.m.•22 views

CVE-2023-1640

creationtimestamp| type| source ---|---|--- 2023-03-27 02:39:19+00:00| seen| Telegram/QUkF3080NMPKyOH5J1ZUYUkCAu2ok-hue3NjCbrQNrLR2w...

5.5CVSS5.4AI score0.00318EPSS
SaveExploits1
CVE
CVE
•added 2023/03/26 9:00 p.m.•80 views

CVE-2023-1640

Affected product: IObit Malware Fighter 9.4.0.776. Vulnerable component: ObCallbackProcess.sys, IOCTL Handler, function 0x222010. Root cause: improper cleanup/release of resources in the 0x222010 path. Impact: local attacker can cause denial of service. Exploit context: vulnerability has been dis...

5.5CVSS5.5AI score0.00318EPSS
SaveExploits1References4Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:58 a.m.•8 views

SUSE CVE-2010-2077

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1640. Reason: This candidate is a duplicate of CVE-2010-1640. Notes: All CVE users should reference CVE-2010-1640 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

7AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/12/10 12:00 a.m.•31 views

Amazon Linux AMI : rsync (ALAS-2022-1640)

The version of rsync installed on the remote host is prior to 3.0.6-12.14. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1640 advisory. An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input ha...

7.5CVSS7.1AI score0.51733EPSS
SaveExploits1References3
NVD
NVD
•added 2022/07/26 10:15 p.m.•30 views

CVE-2022-1640

Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00901EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/07/26 10:15 p.m.•57 views

CVE-2022-1640

Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.00901EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/07/26 10:15 p.m.•21 views

UBUNTU-CVE-2022-1640

Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.00901EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/07/26 9:56 p.m.•75 views

CVE-2022-1640

Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.00901EPSS
SaveExploits0
CVE
CVE
•added 2022/07/26 9:56 p.m.•228 views

CVE-2022-1640

CVE-2022-1640 is a Google Chrome/Chromium vulnerability: a Use-after-free in Sharing path in Chrome prior to version 101.0.4951.64 could enable heap corruption when a user interacted with a crafted HTML page. The issue is listed in Chrome’s May 2022 stable-channel update (and Debian/Gentoo/Fedora...

8.8CVSS8.7AI score0.00901EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder