Lucene search
K

20908 matches found

Nuclei
Nuclei
added 17 hours ago21 views

Joomla! Roland Breedveld Album 1.14 - Local File Inclusion

Joomla! Roland Breedveld Album 1.14 comalbum is susceptible to local file inclusion because it allows remote attackers to access arbitrary directories and have unspecified other impact via a .. dot dot in the target parameter to index.php. id: CVE-2009-3318 info: name: Joomla! Roland Breedveld...

7.5CVSS5.7AI score0.01869EPSS
Exploits1References4
Nuclei
Nuclei
added 17 hours ago51 views

KR-Web <=1.1b2 - Remote File Inclusion

KR-Web 1.1b2 and prior contain a remote file inclusion vulnerability via adm/krgourl.php, which allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter. id: CVE-2009-4223 info: name: KR-Web =1.1b2 - Remote File Inclusion author: geeknik severity: high...

7.5CVSS6AI score0.05675EPSS
Exploits1References5
Nuclei
Nuclei
added 17 hours ago30 views

Horde/Horde Groupware - Local File Inclusion

Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 are susceptible to local file inclusion in framework/Image/Image.php because it allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the HordeImage driver name. id: CVE-2009-0932 inf...

6.4CVSS5.8AI score0.05612EPSS
Exploits8References5
Circl
Circl
added 2 days ago5 views

CVE-2009-10007

creationtimestamp| type| source ---|---|--- 2026-06-09 08:57:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnttcgurjq2q...

9.1CVSS5.3AI score0.00055EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2 days ago5 views

Linux Distros Unpatched Vulnerability : CVE-2009-10007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Catalyst::Plugin::Authentication versions before 0.10027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not...

9.1CVSS5.5AI score0.00055EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 6 days ago5 views

CVE-2026-10063

A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formWPS of the file /goform/formWPS. Such manipulation of the argument peerPin leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and...

9.8CVSS8.2AI score0.00119EPSS
Exploits1References1
Chainguard
Chainguard
added 6 days ago4 views

CVE-2009-2675 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-17-openj9...

10CVSS5.7AI score0.06835EPSS
Exploits0
Chainguard
Chainguard
added 6 days ago5 views

CVE-2009-2670 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-17-openj9...

5CVSS5.7AI score0.03648EPSS
Exploits1
Chainguard
Chainguard
added 6 days ago5 views

CVE-2009-2673 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-17-openj9...

7.5CVSS5.7AI score0.14277EPSS
Exploits0
Chainguard
Chainguard
added 6 days ago5 views

CVE-2009-2671 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-17-openj9...

5CVSS5.7AI score0.11181EPSS
Exploits0
Chainguard
Chainguard
added 6 days ago4 views

CVE-2009-1103 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-17-openj9...

6.4CVSS5.7AI score0.05145EPSS
Exploits0
EUVD
EUVD
added 2026/05/31 1:0 p.m.10 views

EUVD-2026-33504

A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the argument enrollee can lead to command injection. The attack can be launched remotely. The exploit has been publicly...

6.5CVSS6.4AI score0.01433EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/31 12:45 p.m.9 views

CVE-2026-10181

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /goform/formSysCmd. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made...

9CVSS7.8AI score0.00048EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2026/05/31 1:15 a.m.11 views

EUVD-2026-33478

A weakness has been identified in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSysLog of the file /goform/formSysLog. This manipulation of the argument currentpage causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been mad...

9CVSS7.9AI score0.00046EPSS
Exploits0References4
CVE
CVE
added 2026/05/31 12:45 a.m.9 views

CVE-2026-10158

TRENDnet TEW-432BRP (firmware 3.10B20) contains a stack-based buffer overflow in the formPortFw function (/goform/formPortFw) triggered by manipulation of server_name. Remote exploitation is possible. The exploit is publicly available. The vendor notes the device is EOL and past fixes are not fea...

9CVSS7.8AI score0.00046EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/31 12:0 a.m.8 views

PT-2026-45164

A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. Such manipulation of the argument start wizard leads to stack-based buffer overflow. The attack can be launched remotely...

9CVSS7.8AI score0.00046EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/05/29 2:45 p.m.6 views

CVE-2026-10064 TRENDnet TEW-432BRP formSetPortTr stack-based overflow

A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argument specialname results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit...

6.5CVSS7.1AI score0.00039EPSS
Exploits1References4
Circl
Circl
added 2026/05/20 6:0 p.m.3 views

CVE-2009-1537

creationtimestamp| type| source ---|---|--- 2026-05-20 18:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/675f3e40-1b20-4f43-8a01-57264171ed3f 2026-05-20 21:13:36+00:00| seen| https://infosec.exchange/users/secdb/statuses/116608677530202595 2026-05-2...

9.3CVSS5.3AI score0.53016EPSS
Exploits7References6
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/18 7:16 a.m.8 views

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in xercesImpl

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in xercesImpl CVE-2009-2625, CVE-2012-0881, CVE-2013-4002, CVE-2020-14338, CVE-2022-23437. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2009-2625 DESCRIPTION: XMLScanner.java in Apache Xerces2...

7.8CVSS6.7AI score0.07428EPSS
Exploits2Affected Software1
GithubExploit
GithubExploit
added 2026/05/07 11:31 p.m.64 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager

As part of my OSCP preparation I came across CVE-2009-3999 HP P...

10CVSS5.8AI score0.6084EPSS
Exploits11
Rows per page
Query Builder