Lucene search
K

77 matches found

EUVD
EUVD
added 2026/01/13 6:41 p.m.1 views

EUVD-2026-2061

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that...

8.6CVSS7.2AI score0.00056EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 10:16 a.m.2 views

CVE-2019-2061

In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112610994...

8.8CVSS7.8AI score0.00409EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-2061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.22 and prior. Difficult to exploi...

6.3CVSS5.9AI score0.00201EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/03/09 3:58 a.m.5 views

CVE-2025-2061

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

6.1CVSS6.3AI score0.00135EPSS
Exploits1References1
Circl
Circl
added 2025/03/07 3:34 a.m.4 views

CVE-2025-2061

creationtimestamp| type| source ---|---|--- 2025-03-07 03:34:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6789 2025-03-07 06:00:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrdfilwh22o 2025-03-07 06:34:29+00:00| seen|...

6.1CVSS4.5AI score0.00135EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/03/07 3:0 a.m.5 views

CVE-2025-2061 code-projects Online Ticket Reservation System passenger.php cross site scripting

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

5.3CVSS6.6AI score0.00135EPSS
Exploits1References5
CVE
CVE
added 2025/03/07 3:0 a.m.57 views

CVE-2025-2061

The CVE-2025-2061 entry concerns code-projects Online Ticket Reservation System 1.0. The vulnerability is in /passenger.php where manipulation of a request parameter name enables cross-site scripting (XSS). Exploitation is remote and the exploit has been disclosed publicly. No remediation details...

6.1CVSS6.6AI score0.00135EPSS
Exploits1References5Affected Software1
OpenVAS
OpenVAS
added 2024/07/24 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-2061)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.1AI score0.00477EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/06/19 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2024:2061-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS9.1AI score0.0588EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.15 views

openSUSE: Security Advisory for chafa (openSUSE-SU-2022:10017-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS3.9AI score0.00119EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/03/01 12:31 p.m.16 views

CVE-2024-2061 SourceCodester Petrol Pump Management Software edit_supplier.php sql injection

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown code of the file /admin/editsupplier.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

5.8CVSS5.8AI score0.00037EPSS
Exploits0References3
CVE
CVE
added 2024/03/01 12:31 p.m.75 views

CVE-2024-2061

CVE-2024-2061 affects SourceCodester Petrol Pump Management Software 1.0. The vulnerability is a SQL injection in the /admin/edit_supplier.php file caused by manipulating the id parameter, with remote exploitation reported. Multiple sources confirm impact on confidentiality, integrity, and availa...

7.2CVSS5.5AI score0.00037EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/01 12:31 p.m.12 views

CVE-2024-2061 SourceCodester Petrol Pump Management Software edit_supplier.php sql injection

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown code of the file /admin/editsupplier.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

5.8CVSS5.5AI score0.00037EPSS
Exploits0References3
Circl
Circl
added 2024/03/01 11:41 a.m.1 views

CVE-2024-2061

creationtimestamp| type| source ---|---|--- 2024-03-01 11:41:24+00:00| seen| https://t.me/ctinow/197517 2024-03-01 14:21:42+00:00| seen| https://t.me/ctinow/197637 2024-03-01 14:26:14+00:00| seen| https://t.me/ctinow/197647...

7.2CVSS4.5AI score0.00037EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/10/31 2:27 a.m.1 views

SUSE CVE-2021-2061

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...

4.4CVSS6.2AI score0.00201EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/06/07 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2023-2061)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.4AI score0.00035EPSS
Exploits2References2
ICS
ICS
added 2023/06/06 6:0 a.m.51 views

Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R Series/iQ-F Series EtherNet/IP Modules and EtherNet/IP Configuration Tool Vulnerabilities: Weak Password Requirements, Use of Hard-coded Credentials, Missin...

7.5CVSS7.9AI score0.00554EPSS
Exploits0References10
NVD
NVD
added 2023/06/02 5:15 a.m.11 views

CVE-2023-2061

Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via F...

7.5CVSS6.9AI score0.00419EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/06/02 4:3 a.m.10 views

CVE-2023-2061 Authentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules

Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via F...

6.2CVSS7.8AI score0.00419EPSS
Exploits0References2
CVE
CVE
added 2023/06/02 4:3 a.m.54 views

CVE-2023-2061

CVE-2023-2061 describes an authentication bypass in Mitsubishi Electric MELSEC iQ-R Series RJ71EIP91 and iQ-F Series FX5-ENET/IP EtherNet/IP modules due to use of hard-coded credentials in the FTP function. The underlying cause is a hard-coded password that permits remote unauthenticated FTP acce...

7.5CVSS6.9AI score0.00419EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder