14476 matches found
CVE-2025-2006
The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-2006
creationtimestamp| type| source ---|---|--- 2025-03-29 07:28:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9537 2025-03-29 09:31:14+00:00| seen| Telegram/aF4xicIreuyE5yRRD33dmWV9qZXjTlaEQ3JU-sQx2NkHh1A 2025-03-29 09:48:30+00:00| seen|...
CVE-2025-2006 Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload
The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-2006 Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload
The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticated attackers, with Subscriber-level...
RIP Mark Klein
2006 AT&T whistleblower Mark Klein has died...
Linux Distros Unpatched Vulnerability : CVE-2006-7248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-7250, CVE-2012-1410. Reason: this candidate was intended for one issue, but CVE users ma...
Linux Distros Unpatched Vulnerability : CVE-2006-3635
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service stack consumption and system crash via a crafted applicatio...
Linux Distros Unpatched Vulnerability : CVE-2006-4336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table...
Linux Distros Unpatched Vulnerability : CVE-2006-7246
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used. CVE-2006-7246 Note that Nessus relies on the presence...
Linux Distros Unpatched Vulnerability : CVE-2006-7250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mimehdrcmp function in crypto/asn1/asnmime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service NULL pointer dereference and...
Linux Distros Unpatched Vulnerability : CVE-2006-0040
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a text e-mail with a large number of URL...
Linux Distros Unpatched Vulnerability : CVE-2006-4337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the maketable function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding...
Linux Distros Unpatched Vulnerability : CVE-2006-4023
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allows remote attackers ...
Linux Distros Unpatched Vulnerability : CVE-2006-4335
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Array index error in the maketable function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows...
Linux Distros Unpatched Vulnerability : CVE-2006-4573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple unspecified vulnerabilities in the utf8 combining characters handling utf8handlecomb function in encoding.c in screen before 4.0.3 allows user-assisted...
Linux Distros Unpatched Vulnerability : CVE-2006-0670
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed...
CVE-2006-2827
creationtimestamp| type| source ---|---|--- 2025-01-18 14:44:16+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3lfzkbv44772z...
CVE-2006-5160
creationtimestamp| type| source ---|---|--- 2025-01-17 14:57:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2147...