Lucene search
K

78 matches found

OSV
OSV
added 2026/03/27 2:3 p.m.0 views

OESA-2026-1713 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

7.8CVSS7.2AI score0.00037EPSS
Exploits0References3
OSV
OSV
added 2026/03/27 2:3 p.m.0 views

OESA-2026-1710 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

7.8CVSS7.2AI score0.00037EPSS
Exploits0References3
OSV
OSV
added 2026/03/19 12:0 a.m.2 views

UBUNTU-CVE-2026-2046

Unknown description...

5.8AI score
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/03/19 12:0 a.m.0 views

CVE-2026-2046

Unknown description...

7.1AI score
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/03/18 10:57 a.m.0 views

SUSE CVE-2026-2046

unknown...

5.8AI score
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 10:20 p.m.4 views

CVE-2022-2046

The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but does not check the URL domain it gets the zip files from. This could allow administrators to run code on the server, which is a problem in multisite...

4.9CVSS6.8AI score0.00292EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/03/08 10:35 p.m.14 views

CVE-2025-2046

A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/print1.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS7.3AI score0.0006EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/06 10:0 p.m.6 views

CVE-2025-2046 SourceCodester Best Employee Management System print1.php sql injection

A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/print1.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7.6AI score0.0006EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/03/06 10:0 p.m.9 views

CVE-2025-2046 SourceCodester Best Employee Management System print1.php sql injection

A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/print1.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

6.5CVSS0.0006EPSS
Exploits1References5
OSV
OSV
added 2025/03/03 3:15 a.m.0 views

CVE-2025-20653

In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291064; Issue I...

6.5CVSS6AI score
Exploits0References1
NVD
NVD
added 2023/07/10 4:15 p.m.8 views

CVE-2023-2046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8...

9.8CVSS9.9AI score0.00083EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/07/09 5:12 p.m.8 views

CVE-2023-2046 SQLi in Yontem Vehicle TrackingSsystem

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8...

9.8CVSS7.4AI score0.00083EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/07/09 5:12 p.m.12 views

CVE-2023-2046 SQLi in Yontem Vehicle TrackingSsystem

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8...

9.8CVSS10AI score0.00083EPSS
Exploits0References2
CVE
CVE
added 2023/07/09 5:12 p.m.33 views

CVE-2023-2046

Summary: CVE-2023-2046 affects Yontem Informatics Vehicle Tracking System prior to version 8 due to an SQL Injection vulnerability caused by improper neutralization of special elements in SQL commands. This can lead to unauthorized data access or modification as outlined by multiple sources. Affe...

9.8CVSS7.4AI score0.00083EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/17 12:0 a.m.77 views

Amazon Linux 2 : libssh2 (ALAS-2023-2046)

The version of libssh2 installed on the remote host is prior to 1.4.3-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2046 advisory. An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the libssh2packetrequire and libssh2packetrequirev...

9.1CVSS7.4AI score0.01176EPSS
Exploits0References6
OSV
OSV
added 2022/08/08 2:15 p.m.3 views

CVE-2022-2046

The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but does not check the URL domain it gets the zip files from. This could allow administrators to run code on the server, which is a problem in multisite...

4.9CVSS6.7AI score
Exploits0References2
CVE
CVE
added 2022/08/08 1:46 p.m.55 views

CVE-2022-2046

CVE-2022-2046 (Directorist WordPress plugin) affects WordPress Directorist plugin versions prior to 7.2.3. The vulnerability arises because the plugin allows administrators to download other plugins from the vendor directly to the site without validating the ZIP source URL domain, enabling potent...

4.9CVSS5.1AI score0.00292EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2022/08/08 1:46 p.m.10 views

CVE-2022-2046 Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload

The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but does not check the URL domain it gets the zip files from. This could allow administrators to run code on the server, which is a problem in multisite...

5.5AI score0.00292EPSS
Exploits2References2
RedHat Linux
RedHat Linux
added 2021/09/21 10:13 a.m.66 views

Moderate: Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update

An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8CVSS7AI score0.51799EPSS
Exploits3References142
Rockylinux
Rockylinux
added 2021/09/21 7:13 a.m.80 views

mysql:8.0 security, bug fix, and enhancement update

An update is available for mecab-ipadic, mecab, mysql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server...

8CVSS7.2AI score0.51799EPSS
Exploits3
Rows per page
Query Builder