Lucene search
K

123 matches found

Circl
Circl
added 2026/05/15 4:51 p.m.5 views

CVE-2026-2031

creationtimestamp| type| source ---|---|--- 2026-05-15 16:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlvs5mlvn72i...

10CVSS5.8AI score0.00425EPSS
Exploits0References1
Circl
Circl
added 2026/04/10 4:12 p.m.1 views

CVE-2031-45862

creationtimestamp| type| source ---|---|--- 2026-04-10 16:12:26+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mj5pmw6q7722...

5.7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.3 views

Azure Linux 3.0 Security Update: samba (CVE-2022-2031)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2031 advisory. - A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single...

8.8CVSS7.4AI score0.00351EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-2418

Malware in sbrugna...

4.3CVSS6.2AI score0.00579EPSS
Exploits0References9
OSV
OSV
added 2025/09/25 6:28 p.m.2 views

CLSA-2025-1758824905 Fix CVE(s): CVE-2022-2031, CVE-2022-32744

SECURITY UPDATE: disable kpasswd port to mitigate vulnerabilities - debian/patches/CVE-2022-2031CVE-2022-32744.patch: add kpasswd port = 0 to disable kpasswd service as a workaround for CVE-2022-32744 and CVE-2022-2031 - kpasswd is not a critical protocol for AD DC in most installations -...

8.8CVSS5.8AI score0.00516EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-2031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.22 and prior. Easily...

6.8CVSS6AI score0.0034EPSS
Exploits0References2
Metasploit
Metasploit
added 2025/06/05 6:50 p.m.392 views

ThinManager Path Traversal (CVE-2023-27856) Arbitrary File Download

This module exploits a path traversal vulnerability CVE-2023-27856 in ThinManager use auxiliary/gather/thinmanagertraversaldownload msf auxiliarythinmanagertraversaldownload show actions ...actions... msf auxiliarythinmanagertraversaldownload set ACTION msf auxiliarythinmanagertraversaldownload...

7.5CVSS7.6AI score0.48201EPSS
Exploits1
Metasploit
Metasploit
added 2025/06/05 6:50 p.m.331 views

ThinManager Path Traversal (CVE-2023-2915) Arbitrary File Delete

This module exploits a path traversal vulnerability CVE-2023-2915 in ThinManager use auxiliary/admin/networking/thinmanagertraversaldelete msf auxiliarythinmanagertraversaldelete show actions ...actions... msf auxiliarythinmanagertraversaldelete set ACTION msf auxiliarythinmanagertraversaldelete...

9.1CVSS7.4AI score0.10289EPSS
Exploits1
Metasploit
Metasploit
added 2025/06/04 6:55 p.m.319 views

ThinManager Path Traversal (CVE-2023-27855) Arbitrary File Upload

This module exploits a path traversal vulnerability CVE-2023-27855 in ThinManager use auxiliary/admin/networking/thinmanagertraversalupload msf auxiliarythinmanagertraversalupload show actions ...actions... msf auxiliarythinmanagertraversalupload set ACTION msf auxiliarythinmanagertraversalupload...

9.8CVSS7.4AI score0.71885EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 1:52 a.m.4 views

CVE-2023-2031

The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS5.8AI score0.00122EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:30 p.m.4 views

CVE-2002-2031

Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results...

5CVSS7.2AI score0.28987EPSS
Exploits1References1
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.25 views

CVE-2022-2031 affecting package samba 4.12.5-7

CVE-2022-2031 affecting package samba 4.12.5-7. No patch is available currently...

8.8CVSS6.9AI score0.00351EPSS
Exploits0
CBLMariner
CBLMariner
added 2024/10/15 7:11 p.m.14 views

CVE-2022-2031 affecting package samba for versions less than 4.18.3-1

CVE-2022-2031 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

8.8CVSS8.8AI score0.00351EPSS
Exploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.231 views

Victory FTP Server 5.0 LIST Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Victory FTP Server 5.0 LIST DoS', 'Description' = %q The Victory FTP Server v5.0 can be brought down by sending a very simple LIST command ,...

5CVSS7.4AI score0.70215EPSS
Exploits2
OpenVAS
OpenVAS
added 2024/06/15 12:0 a.m.14 views

openSUSE Security Advisory (SUSE-SU-2024:2031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.1AI score0.00681EPSS
Exploits0References5
NVD
NVD
added 2024/03/12 8:15 p.m.3 views

CVE-2024-2031

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoomrecordingsbymeeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.7AI score0.00082EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/12 7:32 p.m.13 views

CVE-2024-2031 Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoomrecordingsbymeeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00082EPSS
Exploits0References2
CVE
CVE
added 2024/03/12 7:32 p.m.75 views

CVE-2024-2031

CVE-2024-2031 affects the Video Conferencing with Zoom plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) in the shortcode used by the plugin, specifically the zoom_recordings_by_meeting shortcode, and impacts all versions up to and including 4.4.4. Root cause per the ...

6.4CVSS7.6AI score0.00082EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/12 12:0 a.m.3 views

WordPress Video Conferencing with Zoom Plugin <= 4.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Video Conferencing with Zoom Type Plugin Vulnerable versions = 4.4.4 Fixed in 4.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2031 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9603227b9596 Credits Krzysztof...

6.4CVSS5.8AI score0.00082EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.25 views

openSUSE: Security Advisory for ldb, samba (SUSE-SU-2022:2586-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.1AI score0.00574EPSS
Exploits0References2
Rows per page
Query Builder