Lucene search
K

14 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-17578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Dolibarr 10.0.2. It has XSS via the outgoing email setup feature in the admin/mails.php?action=edit URI via the Sender email for...

5.4CVSS5.6AI score0.00313EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 8:2 a.m.4 views

CVE-2019-17578

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Sender email for automatic emails default value in php.ini: Undefined" field...

5.4CVSS5.8AI score0.00313EPSS
Exploits1References1
OSV
OSV
added 2024/05/03 3:15 a.m.34 views

CVE-2023-42118

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing o...

8.8CVSS8AI score
Exploits0References2
NVD
NVD
added 2024/05/03 3:15 a.m.17 views

CVE-2023-42118

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing o...

8.8CVSS7.8AI score0.03014EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2024/05/03 3:15 a.m.75 views

CVE-2023-42118

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing o...

8.8CVSS7.6AI score0.03014EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/05/03 2:13 a.m.30 views

CVE-2023-42118 Exim libspf2 Integer Underflow Remote Code Execution Vulnerability

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing o...

7.5CVSS8AI score0.03014EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2024/05/03 2:13 a.m.29 views

CVE-2023-42118

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing o...

8.8CVSS8.1AI score0.03014EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2024/05/03 2:13 a.m.60 views

CVE-2023-42118

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing o...

8.8CVSS8.1AI score0.03014EPSS
Exploits0
Circl
Circl
added 2024/01/16 9:31 a.m.1 views

CVE-2019-17578

creationtimestamp| type| source ---|---|--- 2024-01-16 09:31:47+00:00| seen| https://t.me/ctinow/168704...

5.4CVSS5.4AI score0.00313EPSS
Exploits1References1
CVE
CVE
added 2019/10/16 5:34 p.m.44 views

CVE-2019-17578

Dolibarr 10.0.2 is affected by a cross-site scripting (XSS) vulnerability in the outgoing email setup feature. Specifically, the admin/mails.php?action=edit URI and the Sender email for automatic emails field can be abused to inject/execute client-side scripts. Multiple sources in the provided se...

5.4CVSS5.2AI score0.00313EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2017/12/13 9:29 a.m.1 views

CVE-2017-17578

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

9.8CVSS5.8AI score0.02377EPSS
Exploits1References2
NVD
NVD
added 2017/12/13 9:29 a.m.7 views

CVE-2017-17578

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

9.8CVSS10AI score0.02377EPSS
Exploits1References2
CVE
CVE
added 2017/12/13 9:0 a.m.41 views

CVE-2017-17578

CVE-2017-17578 affects FS Crowdfunding Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in the latest_news_details.php script via the id parameter, enabling a remote attacker to inject SQL commands. CVSS vectors indicate high/critical impact with network access and no authentication r...

9.8CVSS9.8AI score0.02377EPSS
Exploits1References2Affected Software1
Circl
Circl
added 2017/12/09 12:0 a.m.9 views

CVE-2017-17578

creationtimestamp| type| source ---|---|--- 2017-12-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43257...

9.8CVSS7AI score0.02377EPSS
Exploits1References1
Rows per page
Query Builder