Lucene search
K

107 matches found

Circl
Circl
added 2026/02/12 5:0 a.m.6 views

CVE-2026-2039

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-077/ 2026-02-24 22:02:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn67mrth52k 2026-02-25 09:40:09+00:00| seen|...

9.8CVSS7.3AI score0.00673EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2013-2039

Malware in sbrugna...

9.8CVSS9.2AI score0.02137EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-2039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, whic...

5.3CVSS6.6AI score0.02477EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 1:52 a.m.8 views

CVE-2023-2039

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?limit=10=0ℴ=desc. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

8.8CVSS7.1AI score0.00802EPSS
Exploits1References1
Circl
Circl
added 2025/03/06 8:34 p.m.15 views

CVE-2025-2039

creationtimestamp| type| source ---|---|--- 2025-03-06 20:34:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6748 2025-03-06 23:53:00+00:00| seen| https://t.me/cvedetector/19758 2025-03-08 04:34:12+00:00| seen| Telegram/X6Wyk65rmcU86ivtfNur2f5hVnDLXTMeTTQqpZlnsG3vQ1K...

7.2CVSS4.5AI score0.00458EPSS
Exploits1References2
OSV
OSV
added 2025/03/06 8:15 p.m.2 views

CVE-2025-2039

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/deletemembers.php. The manipulation of the argument memberid leads to sql injection. It is possible to launch the attack remotely. The exploi...

7.2CVSS5.8AI score0.00458EPSS
Exploits1References5
NVD
NVD
added 2025/03/06 8:15 p.m.17 views

CVE-2025-2039

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/deletemembers.php. The manipulation of the argument memberid leads to sql injection. It is possible to launch the attack remotely. The exploi...

7.2CVSS0.00458EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/03/06 8:0 p.m.7 views

CVE-2025-2039 code-projects Blood Bank Management System delete_members.php sql injection

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/deletemembers.php. The manipulation of the argument memberid leads to sql injection. It is possible to launch the attack remotely. The exploi...

5.8CVSS7.7AI score0.00458EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/03/06 8:0 p.m.19 views

CVE-2025-2039 code-projects Blood Bank Management System delete_members.php sql injection

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/deletemembers.php. The manipulation of the argument memberid leads to sql injection. It is possible to launch the attack remotely. The exploi...

5.8CVSS0.00458EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2014-2039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local...

4.9CVSS6.8AI score0.00456EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/06/19 12:0 a.m.17 views

openSUSE Security Advisory (SUSE-SU-2024:2039-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.12117EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2024/06/18 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2024:2039-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.12117EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/04/24 12:0 a.m.40 views

RHEL 8 : tigervnc (RHSA-2024:2039)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2039 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

7.8CVSS7.4AI score0.01843EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2024/04/09 6:59 p.m.19 views

CVE-2024-2039

The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Postv2 block title tag in all versions up to, and including, 3.12.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...

6.4CVSS5.8AI score0.0045EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/09 6:59 p.m.41 views

CVE-2024-2039 Stackable – Page Builder Gutenberg Blocks <= 3.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Posts Block

The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Postv2 block title tag in all versions up to, and including, 3.12.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...

6.4CVSS5.8AI score0.0045EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.15 views

WordPress Stackable Plugin <= 3.12.11 is vulnerable to Cross Site Scripting (XSS)

Software Stackable Type Plugin Vulnerable versions = 3.12.11 Fixed in 3.12.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2039 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b3e3ea1b1636 Credits Ngô Thiên An ancorn -...

6.4CVSS5.8AI score0.0045EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/17 12:0 a.m.91 views

Amazon Linux 2 : openssl11 (ALAS-2023-2039)

The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2039 advisory. A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509...

7.5CVSS6.4AI score0.03658EPSS
Exploits0References8
OSV
OSV
added 2023/04/14 8:15 a.m.14 views

CVE-2023-2039

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS7.4AI score
Exploits0References3
CVE
CVE
added 2023/04/14 8:0 a.m.106 views

CVE-2023-2039

CVE-2023-2039 affects novel-plus 3.6.2 with a SQL injection in the /author/list?limit=10&offset=0&order=desc endpoint caused by unsafely processed sort parameter. Exploitation can be remote; exploits have been disclosed publicly. Multiple connected sources confirm the issue and the affected compo...

8.8CVSS7.7AI score0.00802EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/14 8:0 a.m.7 views

CVE-2023-2039 novel-plus sql injection

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS8.9AI score0.00802EPSS
Exploits1References3
Rows per page
Query Builder