Lucene search
K

86 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:20 a.m.5 views

CVE-2024-2072

A vulnerability, which was classified as problematic, was found in SourceCodester Flashcard Quiz App 1.0. This affects an unknown part of the file /endpoint/update-flashcard.php. The manipulation of the argument question/answer leads to cross site scripting. It is possible to initiate the attack...

5.4CVSS5.2AI score0.00075EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2025/09/10 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-2072)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00279EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-2072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily...

6.8CVSS6AI score0.0034EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 8:30 a.m.2 views

CVE-2019-2072

In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116117112...

8.8CVSS7.8AI score0.00409EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:31 p.m.5 views

CVE-2002-2072

java.security.AccessController in Sun Java Virtual Machine JVM in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service JVM crash via a Java program that calls the doPrivileged method with a null argument...

5CVSS7AI score0.06002EPSS
Exploits1References1
Circl
Circl
added 2025/03/31 9:31 a.m.2 views

CVE-2025-2072

creationtimestamp| type| source ---|---|--- 2025-03-31 09:31:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9621 2025-03-31 13:20:28+00:00| seen| https://t.me/cvedetector/21578...

5.1CVSS4.8AI score0.00328EPSS
Exploits0References2
NVD
NVD
added 2025/03/31 9:15 a.m.9 views

CVE-2025-2072

A Reflected Cross-Site Scripting XSS vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a...

5.1CVSS0.00328EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/31 8:34 a.m.11 views

CVE-2025-2072 Reflected Cross-Site Scripting (XSS) Vulnerability in FAST LTA Silent Brick WebUI

A Reflected Cross-Site Scripting XSS vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a...

5.1CVSS0.00328EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 8:34 a.m.5 views

CVE-2025-2072 Reflected Cross-Site Scripting (XSS) Vulnerability in FAST LTA Silent Brick WebUI

A Reflected Cross-Site Scripting XSS vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a...

5.1CVSS6AI score0.00328EPSS
Exploits0References1
OSV
OSV
added 2024/03/27 6:24 p.m.3 views

CLSA-2024-1711563891 Update of tzdata

Upgrade to tzdata-2024a - Kazakhstan unifies on UTC+5 beginning 2024-03-01. - Palestine springs forward a week later after Ramadan. - localtime no longer mishandles Ciudad Juárez in 2422. - zic no longer pretends to support indefinite-past DST. - Ittoqqortoormiit, Greenland changes time zones on...

5.8AI score
Exploits0References1
OSV
OSV
added 2024/03/27 5:45 p.m.2 views

CLSA-2024-1711561513 Update of tzdata

Upgrade to tzdata-2024a - Kazakhstan unifies on UTC+5 beginning 2024-03-01. - Palestine springs forward a week later after Ramadan. - localtime no longer mishandles Ciudad Juárez in 2422. - zic no longer pretends to support indefinite-past DST. - Ittoqqortoormiit, Greenland changes time zones on...

5.8AI score
Exploits0References1
NVD
NVD
added 2024/03/01 5:15 p.m.10 views

CVE-2024-2072

A vulnerability, which was classified as problematic, was found in SourceCodester Flashcard Quiz App 1.0. This affects an unknown part of the file /endpoint/update-flashcard.php. The manipulation of the argument question/answer leads to cross site scripting. It is possible to initiate the attack...

5.4CVSS3.7AI score0.00075EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/03/01 5:0 p.m.12 views

CVE-2024-2072 SourceCodester Flashcard Quiz App update-flashcard.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Flashcard Quiz App 1.0. This affects an unknown part of the file /endpoint/update-flashcard.php. The manipulation of the argument question/answer leads to cross site scripting. It is possible to initiate the attack...

4CVSS6.4AI score0.00075EPSS
Exploits1References3
CVE
CVE
added 2024/03/01 5:0 p.m.73 views

CVE-2024-2072

CVE-2024-2072 affects SourceCodester Flashcard Quiz App 1.0. The vulnerability resides in the /endpoint/update-flashcard.php script, where improper handling of the question/answer parameter enables cross-site scripting. It is exploitable remotely, and public proof/disclosures exist across multipl...

5.4CVSS3.7AI score0.00075EPSS
Exploits1References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/10/31 2:27 a.m.1 views

SUSE CVE-2021-2072

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS6.3AI score0.0034EPSS
Exploits0References2
Circl
Circl
added 2023/07/11 6:29 p.m.3 views

CVE-2023-2072

creationtimestamp| type| source ---|---|--- 2023-07-11 18:29:43+00:00| seen| https://t.me/cibsecurity/66390...

8.8CVSS8.1AI score0.00889EPSS
Exploits0References1
CVE
CVE
added 2023/07/11 1:5 p.m.52 views

CVE-2023-2072

CVE-2023-2072 affects Rockwell Automation PowerMonitor 1000. Stored cross-site scripting in the product’s web pages allows code injection by an unauthenticated attacker to impact an authenticated user, potentially enabling remote code execution and compromising confidentiality, integrity, and ava...

8.8CVSS8.7AI score0.00889EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2022/12/30 10:15 p.m.6 views

CVE-2020-2072

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

Exploits0
Circl
Circl
added 2022/07/25 4:32 p.m.2 views

CVE-2022-2072

creationtimestamp| type| source ---|---|--- 2022-07-25 16:32:57+00:00| seen| https://t.me/cibsecurity/46890...

6.1CVSS6AI score0.0021EPSS
Exploits2References1
CVE
CVE
added 2022/07/25 12:46 p.m.68 views

CVE-2022-2072

CVE-2022-2072 affects the WordPress Name Directory plugin prior to 1.25.3. The vulnerability arises from insufficient sanitization/escaping of a parameter output back to the page, causing both Reflected and Stored XSS (payloads are saved to the database after the request). Connected sources confi...

6.1CVSS6AI score0.0021EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder