Lucene search
+L

78518 matches found

Circl
Circl
added 2026/01/08 2:00 a.m.13 views

CVE-2019-25278

creationtimestamp| type| source ---|---|--- 2026-01-08 02:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbuv5adh6p2o 2026-01-08 21:03:05+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxwwuuf23...

9.1CVSS5.8AI score0.00335EPSS
SaveExploits2References2
Circl
Circl
added 2026/01/08 1:50 a.m.12 views

CVE-2019-25291

creationtimestamp| type| source ---|---|--- 2026-01-08 01:50:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbuuldjhbn2c 2026-01-08 08:21:22+00:00| seen| https://gist.github.com/Darkcrai86/3ef6259ad8c3948c3631b793f40a68f1 2026-01-08 21:03:09+00:00| seen|...

9.3CVSS5.8AI score0.00416EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/08 1:50 a.m.5 views

CVE-2019-25295 WP Cost Estimation < 9.660 - Upload Directory Traversal

The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site...

6.5CVSS6.1AI score0.006EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/08 1:50 a.m.32 views

CVE-2019-25295

CVE-2019-25295 affects the WP Cost Estimation plugin for WordPress. Versions prior to 9.660 are vulnerable to a directory traversal in the uploadFormFiles function, allowing an attacker to overwrite any file with a whitelisted type on the site. This results in potential partial impact to integrit...

6.5CVSS6.1AI score0.006EPSS
SaveExploits0References3
Circl
Circl
added 2026/01/08 1:40 a.m.22 views

CVE-2019-25282

creationtimestamp| type| source ---|---|--- 2026-01-08 01:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbutzgn5ia2c 2026-01-08 21:03:07+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxx65bv23...

9.8CVSS5.8AI score0.00425EPSS
SaveExploits1References2
Circl
Circl
added 2026/01/08 1:24 a.m.11 views

CVE-2019-25279

creationtimestamp| type| source ---|---|--- 2026-01-08 01:24:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbut44p5xp2y 2026-01-08 21:03:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxwzgx52h...

7.5CVSS5.8AI score0.00226EPSS
SaveExploits2References2
Circl
Circl
added 2026/01/08 1:18 a.m.12 views

CVE-2019-25289

creationtimestamp| type| source ---|---|--- 2026-01-08 01:18:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbusrub6c722 2026-01-08 21:03:08+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxxdabi22...

8.8CVSS5.8AI score0.01916EPSS
SaveExploits0References2
Circl
Circl
added 2026/01/08 1:11 a.m.11 views

CVE-2019-25268

creationtimestamp| type| source ---|---|--- 2026-01-08 01:11:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbusffkbjm2e 2026-01-08 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxwpgin2r...

9.8CVSS5.8AI score0.00422EPSS
SaveExploits1References2
NVD
NVD
added 2026/01/08 12:15 a.m.14 views

CVE-2019-25280

Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions...

6.1CVSS0.00278EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/08 12:15 a.m.12 views

CVE-2019-25231

devolo dLAN Cockpit 4.3.1 contains an unquoted service path vulnerability in the 'DevoloNetworkService' that allows local non-privileged users to potentially execute arbitrary code. Attackers can exploit the insecure service path configuration by inserting malicious code in the system root path t...

8.5CVSS0.00152EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/07 11:09 p.m.30 views

CVE-2019-25278

FaceSentry Access Control System 6.4.8 is vulnerable to a cleartext transmission issue that enables remote attackers to perform MiTM attacks and intercept authentication credentials (e.g., HTTP cookie data) during network communications. The vulnerability stems from transmitting credentials in cl...

9.1CVSS6.5AI score0.00335EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2026/01/07 11:09 p.m.32 views

CVE-2019-25268

This CVE affects NREL BEopt 2.8.0.0 . The vulnerability is a DLL hijacking issue caused by insecure loading of libraries, allowing an attacker to place malicious libraries on WebDAV or SMB shares (e.g., sdl2.dll and libegl.dll ) and execute arbitrary code when a user opens the application. Impact...

9.8CVSS7AI score0.00422EPSS
SaveExploits1References5
GithubExploit
GithubExploit
added 2026/01/07 7:14 p.m.205 views

Exploit for Out-of-bounds Write in Sudo_Project Sudo

Analysis of the CVE-2019-18634 https://www.exploit-db.com/explo...

7.8CVSS8.2AI score0.19426EPSS
SaveExploits14
IBM Security Bulletins
IBM Security Bulletins
added 2026/01/07 12:30 p.m.23 views

Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.15.0 shipped with IBM Cloud Pak for Business Automation iFixes for December 2025.

Summary IBM Cloud Pak for Business Automation includes IBM Cloud Pak foundational services. IBM Cloud Pak for Business Automation December 2025 security fixes update this dependency beyond 4.15.0 to address security vulnerabilities. Vulnerability Details CVEID:CVE-2016-10540 DESCRIPTION: Minimatc...

9.1CVSS9.1AI score0.21333EPSS
SaveExploits15Affected Software2
Circl
Circl
added 2026/01/07 10:48 a.m.14 views

CVE-2019-15823

creationtimestamp| type| source ---|---|--- 2026-01-07 10:48:00+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-15823.yaml 2026-01-08 21:03:11+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbwuxxqv5h2t...

9.8CVSS9.4AI score0.08584EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:37 a.m.22 views

CVE-2019-7233

In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference...

8.8CVSS6.8AI score0.0148EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:37 a.m.16 views

CVE-2019-7035

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

7.5CVSS6.2AI score0.03123EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:37 a.m.22 views

CVE-2019-7404

An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file via an HTTP request containing its full pathname, such as http://192.168.0.1/var/gapm7100$today'sdate.log for reading a filename such as gapm7100190101.log...

7.5CVSS7.1AI score0.01541EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:37 a.m.15 views

CVE-2019-7323

GUP generic update process in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. The update process relies on cleartext HTTP. The attacker could replace the...

7.5CVSS7.7AI score0.01081EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:37 a.m.16 views

CVE-2019-7260

Linear eMerge E3-Series devices have Cleartext Credentials in a Database...

9.8CVSS7AI score0.0663EPSS
SaveExploits0References1
Rows per page
Query Builder