Lucene search
K

63 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:22 a.m.3 views

CVE-2021-22866

A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed more permissions to be granted during a GitHub App's user-authorization web flow than was displayed to the user during approval. To exploit this vulnerability, an attacker would need to create a GitHub Ap...

8.8CVSS6.9AI score0.00203EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.2 views

HP Integrated Lights-Out Denial of Service (CVE-2015-5435)

Unspecified vulnerability in HP Integrated Lights-Out iLO firmware 3 before 1.85 and 4 before 2.22 allows remote authenticated users to cause a denial of service via unknown vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

4CVSS5.5AI score0.00271EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-24026

Malware in sbrugna...

5.4CVSS5.5AI score0.00185EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2004-1289

Malware in sbrugna...

10CVSS6.4AI score0.06584EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-27069

Malicious code in bioql PyPI...

8.1CVSS6.3AI score0.00078EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-8338

Malicious code in bioql PyPI...

4.3CVSS9AI score0.00324EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 8:55 p.m.3 views

CVE-2021-37440

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring...

6.5CVSS6.6AI score0.00228EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:54 p.m.1 views

CVE-2021-37456

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...

5.4CVSS6.1AI score0.00185EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.11 views

CVE-2025-30862 WordPress reCAPTCHA for all plugin <= 2.22 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in sminozzi reCAPTCHA for all recaptcha-for-all allows Cross Site Request Forgery.This issue affects reCAPTCHA for all: from n/a through = 2.22...

4.3CVSS7.2AI score0.00324EPSS
Exploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.53 views

CVE-2025-30862

CVE-2025-30862 is a CSRF vulnerability in the WordPress plugin reCAPTCHA for all (vulnerable up to and including 2.22). Exploitation details are not provided beyond CSRF context, but Patchstack/NVD entries indicate the issue has a CVSS v3.1 base score of 4.3 (Medium) with no privileges required a...

4.3CVSS7.2AI score0.00324EPSS
Exploits0References1
Fedora
Fedora
added 2024/09/23 12:16 a.m.8 views

[SECURITY] Fedora 41 Update: iwd-2.22-1.fc41

The daemon and utilities for controlling and configuring the Wi-Fi network hardware...

7.4AI score
Exploits0
OSV
OSV
added 2024/08/29 11:15 a.m.0 views

CVE-2024-38303

Dell PowerEdge Platform, 14G Intel BIOS versions prior to 2.22.x, contains an Improper Input Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

6CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2024/08/29 12:0 a.m.1 views

Dell PowerEdge Platform 输入验证错误漏洞

Dell PowerEdge Platform is a server platform from Dell USA. An input validation error vulnerability exists in Dell PowerEdge Platform version 2.22.x and prior versions, which stems from the inclusion of an incorrect input validation vulnerability...

6CVSS6.8AI score0.00046EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.2 views

PT-2024-6020 · Dell +1 · Dell Poweredge +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Platform, 14G Intel BIOS versions prior to 2.22.x Description: The issue is related to insufficient input validation in the BIOS software of Dell PowerEdge servers. This could allow an attacker with high privileges and local...

6CVSS6.9AI score0.00046EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.2 views

PT-2024-6022 · Dell +1 · Dell Poweredge Platform +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Platform, 14G Intel BIOS versions prior to 2.22.x Description: The issue is related to an Access of Memory Location After End of Buffer vulnerability in the Dell PowerEdge Platform's 14G Intel BIOS. This vulnerability could be...

6.5CVSS6.7AI score0.00112EPSS
Exploits0References8
Patchstack
Patchstack
added 2024/06/05 1:20 p.m.3 views

WordPress Pure Chat plugin <= 2.22 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Pure Chat versions = 2.22...

4.3CVSS7AI score0.00123EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.1 views

WordPress plugin Pure Chat 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.4CVSS5.8AI score0.00284EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/05/09 7:3 a.m.2 views

WordPress Pure Chat plugin <= 2.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Lucio Sá in WordPress Plugin Pure Chat versions = 2.22...

6.4CVSS5.7AI score0.00284EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/03/06 10:52 a.m.50 views

BIT-GIT-2020-5260 malicious URLs may cause Git to present stored credentials to the wrong server

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure storage provided by the operating system...

9.3CVSS7.3AI score0.373EPSS
Exploits2References20
ATTACKERKB
ATTACKERKB
added 2023/11/09 7:15 p.m.1 views

CVE-2023-34371

A vulnerability in Didier Sampaolo Download SpamReferrerBlock spamreferrerblock.This issue affects Download SpamReferrerBlock: from n/a through = 2.22...

8.8CVSS8.5AI score0.0007EPSS
Exploits0References3
Rows per page
Query Builder