Lucene search
+L

86 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:20 a.m.12 views

CVE-2024-2072

A vulnerability, which was classified as problematic, was found in SourceCodester Flashcard Quiz App 1.0. This affects an unknown part of the file /endpoint/update-flashcard.php. The manipulation of the argument question/answer leads to cross site scripting. It is possible to initiate the attack...

5.4CVSS5.2AI score0.00545EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2025/09/10 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-2072)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.36848EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-2072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily...

6.8CVSS6.7AI score0.02157EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 8:30 a.m.6 views

CVE-2019-2072

In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116117112...

8.8CVSS7.8AI score0.00714EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:31 p.m.12 views

CVE-2002-2072

java.security.AccessController in Sun Java Virtual Machine JVM in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service JVM crash via a Java program that calls the doPrivileged method with a null argument...

5CVSS7AI score0.08859EPSS
SaveExploits2References1
Circl
Circl
added 2025/03/31 9:31 a.m.12 views

CVE-2025-2072

creationtimestamp| type| source ---|---|--- 2025-03-31 09:31:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9621 2025-03-31 13:20:28+00:00| seen| https://t.me/cvedetector/21578...

5.1CVSS4.8AI score0.0034EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/31 9:15 a.m.16 views

CVE-2025-2072

A Reflected Cross-Site Scripting XSS vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a...

5.1CVSS0.0034EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 8:34 a.m.5 views

CVE-2025-2072 Reflected Cross-Site Scripting (XSS) Vulnerability in FAST LTA Silent Brick WebUI

A Reflected Cross-Site Scripting XSS vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a...

5.1CVSS6AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/31 8:34 a.m.23 views

CVE-2025-2072 Reflected Cross-Site Scripting (XSS) Vulnerability in FAST LTA Silent Brick WebUI

A Reflected Cross-Site Scripting XSS vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a...

5.1CVSS0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/27 6:24 p.m.9 views

CLSA-2024-1711563891 Update of tzdata

Upgrade to tzdata-2024a - Kazakhstan unifies on UTC+5 beginning 2024-03-01. - Palestine springs forward a week later after Ramadan. - localtime no longer mishandles Ciudad Juárez in 2422. - zic no longer pretends to support indefinite-past DST. - Ittoqqortoormiit, Greenland changes time zones on...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2024/03/27 5:45 p.m.8 views

CLSA-2024-1711561513 Update of tzdata

Upgrade to tzdata-2024a - Kazakhstan unifies on UTC+5 beginning 2024-03-01. - Palestine springs forward a week later after Ramadan. - localtime no longer mishandles Ciudad Juárez in 2422. - zic no longer pretends to support indefinite-past DST. - Ittoqqortoormiit, Greenland changes time zones on...

5.8AI score
SaveExploits0References1
NVD
NVD
added 2024/03/01 5:15 p.m.24 views

CVE-2024-2072

A vulnerability, which was classified as problematic, was found in SourceCodester Flashcard Quiz App 1.0. This affects an unknown part of the file /endpoint/update-flashcard.php. The manipulation of the argument question/answer leads to cross site scripting. It is possible to initiate the attack...

5.4CVSS3.7AI score0.00545EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/01 5:0 p.m.87 views

CVE-2024-2072

CVE-2024-2072 affects SourceCodester Flashcard Quiz App 1.0. The vulnerability resides in the /endpoint/update-flashcard.php script, where improper handling of the question/answer parameter enables cross-site scripting. It is exploitable remotely, and public proof/disclosures exist across multipl...

5.4CVSS3.7AI score0.00545EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/01 5:0 p.m.14 views

CVE-2024-2072 SourceCodester Flashcard Quiz App update-flashcard.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Flashcard Quiz App 1.0. This affects an unknown part of the file /endpoint/update-flashcard.php. The manipulation of the argument question/answer leads to cross site scripting. It is possible to initiate the attack...

4CVSS6.4AI score0.00545EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/10/31 2:27 a.m.6 views

SUSE CVE-2021-2072

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS6.3AI score0.02157EPSS
SaveExploits0References2
Circl
Circl
added 2023/07/11 6:29 p.m.10 views

CVE-2023-2072

creationtimestamp| type| source ---|---|--- 2023-07-11 18:29:43+00:00| seen| https://t.me/cibsecurity/66390...

8.8CVSS8.1AI score0.00928EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 1:5 p.m.66 views

CVE-2023-2072

CVE-2023-2072 affects Rockwell Automation PowerMonitor 1000. Stored cross-site scripting in the product’s web pages allows code injection by an unauthenticated attacker to impact an authenticated user, potentially enabling remote code execution and compromising confidentiality, integrity, and ava...

8.8CVSS8.7AI score0.00928EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/12/30 10:15 p.m.12 views

CVE-2020-2072

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

SaveExploits0
Circl
Circl
added 2022/07/25 4:32 p.m.11 views

CVE-2022-2072

creationtimestamp| type| source ---|---|--- 2022-07-25 16:32:57+00:00| seen| https://t.me/cibsecurity/46890...

6.1CVSS6AI score0.00666EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/07/25 12:46 p.m.37 views

CVE-2022-2072 Name Directory < 1.25.3 - Reflected Cross-Site Scripting

The Name Directory WordPress plugin before 1.25.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. Furthermore, as the payload is also saved into the database after the request, it leads to a Stored XSS as well...

6.1AI score0.00666EPSS
SaveExploits2References1
Rows per page
Query Builder