Lucene search
+L

136 matches found

Circl
Circl
added 2026/02/19 5:0 a.m.6 views

CVE-2026-2045

creationtimestamp| type| source ---|---|--- 2026-02-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-119/ 2026-02-21 00:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd2dwswl2k 2026-02-25 05:40:09+00:00| seen|...

7.8CVSS7.1AI score0.04642EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 4:20 a.m.12 views

CVE-2012-2045

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2046, and CVE-2012-2047...

10CVSS7.6AI score0.03942EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/08 1:40 p.m.16 views

CVE-2025-2045

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data...

4.3CVSS6.3AI score0.00259EPSS
SaveExploits1References1
Circl
Circl
added 2025/03/06 1:34 p.m.9 views

CVE-2025-2045

creationtimestamp| type| source ---|---|--- 2025-03-06 13:34:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6669 2025-03-06 15:30:38+00:00| seen| https://t.me/cvedetector/19695 2025-03-06 15:44:36+00:00| seen|...

4.3CVSS4.8AI score0.00259EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/03/06 1:4 p.m.8 views

CVE-2025-2045 Incorrect Authorization in GitLab

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data...

4.3CVSS6.7AI score0.00259EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/03/06 1:4 p.m.20 views

CVE-2025-2045 Incorrect Authorization in GitLab

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data...

4.3CVSS0.00259EPSS
SaveExploits1References2
CVE
CVE
added 2025/03/06 1:4 p.m.81 views

CVE-2025-2045

CVE-2025-2045 concerns GitLab Enterprise Edition. Affected: GitLab EE versions 17.7.x before 17.7.6, 17.8.x before 17.8.4, and 17.9.x before 17.9.1. Root cause: improper authorization that allows users with limited permissions to access potentially sensitive project analytics data. Impact: exposu...

4.3CVSS6.7AI score0.00259EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2025/03/06 1:4 p.m.10 views

CVE-2025-2045

Removed by vendor...

4.3CVSS5.8AI score0.00259EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.11 views

GitLab 17.7.0 < 17.7.6 / 17.8 < 17.8.4 / 17.9 < 17.9.1 (CVE-2025-2045)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive...

4.3CVSS5.5AI score0.00259EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2015-2045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HYPERVISORxenversion hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive...

2.1CVSS6.9AI score0.00466EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/04/25 6:53 a.m.47 views

Moderate: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS6.8AI score0.01342EPSS
SaveExploits0References4
Circl
Circl
added 2024/03/01 1:26 a.m.9 views

CVE-2024-2045

creationtimestamp| type| source ---|---|--- 2024-03-01 01:26:59+00:00| seen| https://t.me/ctinow/197193 2024-03-01 01:27:03+00:00| seen| https://t.me/ctinow/197197...

5.5CVSS4.7AI score0.00333EPSS
SaveExploits1References2
NVD
NVD
added 2024/03/01 12:15 a.m.19 views

CVE-2024-2045

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...

5.5CVSS4.7AI score0.00333EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/02/29 11:37 p.m.30 views

CVE-2024-2045 Session 1.17.5 - LFR via chat attachment

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...

5.5CVSS5AI score0.00333EPSS
SaveExploits1References2
CVE
CVE
added 2024/02/29 11:37 p.m.87 views

CVE-2024-2045

The CVE-2024-2045 entry concerns Session version 1.17.5. Affected component: Local File Read via chat attachments, enabling retrieval of internal application files and public files from a user’s device without consent. This is a Local attack (LOCAL) requiring user interaction. Descriptions from m...

5.5CVSS4.9AI score0.00333EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2024/02/29 11:37 p.m.8 views

CVE-2024-2045 Session 1.17.5 - LFR via chat attachment

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...

5.5CVSS5.9AI score0.00333EPSS
SaveExploits1References4
Openbugbounty
Openbugbounty
added 2023/06/24 6:42 p.m.21 views

drumcenter.cz Cross Site Scripting vulnerability OBB-3465400

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/06/07 12:0 a.m.15 views

EulerOS Virtualization 2.11.1 : libarchive (EulerOS-SA-2023-2045)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL...

9.8CVSS7.1AI score0.01936EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/24 2:15 p.m.13 views

CVE-2023-2045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection. This issue affects Auto Damage Tracking Software: before 4...

9.8CVSS9.9AI score0.0062EPSS
SaveExploits0References2
CVE
CVE
added 2023/05/24 1:35 p.m.44 views

CVE-2023-2045

CVE-2023-2045 affects Ipekyolu Software Auto Damage Tracking Software prior to version 4. The vulnerability is an SQL Injection caused by improper neutralization of special elements in SQL commands. This can impact confidentiality, integrity, and availability (CVSSv3.1 base score 9.8). The issue ...

9.8CVSS7.4AI score0.0062EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder