Lucene search
K

112 matches found

OSV
OSV
added 2026/05/11 11:16 p.m.0 views

MINI-2235-3R6G-H998

Bulletin has no description...

7.5CVSS5.7AI score0.00017EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/02/09 7:17 a.m.2 views

CVE-2026-2235 HGiga|C&Cm@il - SQL Injection

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6.3AI score0.00053EPSS
Exploits0References2
Circl
Circl
added 2026/02/09 6:59 a.m.1 views

CVE-2026-2235

creationtimestamp| type| source ---|---|--- 2026-02-09 06:59:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10704-d5aba-2.html...

7.1CVSS5.7AI score0.00053EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:52 a.m.4 views

CVE-2021-2235

Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite component: Install and Upgrade. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.1CVSS7AI score0.02465EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-2235

Malware in sbrugna...

6.5CVSS4.7AI score0.00238EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2019-10777

Malware in sbrugna...

6.1CVSS6.3AI score0.00328EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-3957

Malware in sbrugna...

6.6CVSS6.1AI score0.00111EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/05/22 3:54 p.m.4 views

CVE-2020-2235

A cross-site request forgery CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkin...

6.5CVSS6.6AI score0.0041EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 12:27 a.m.7 views

CVE-2012-2235

Cross-site scripting XSS vulnerability in Support Incident Tracker SiT! 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message...

4.3CVSS5.8AI score0.00225EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-2235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perfgroupdetach functio...

7.8CVSS6.7AI score0.00016EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/02/14 7:1 a.m.1 views

SUSE CVE-2023-2235

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perfgroupdetach function did not check the event's siblings' attachstate before calling addeventtogroups, but removeonexec made it possible to call listdelevent...

7.8CVSS6.6AI score0.00016EPSS
Exploits0References22
F5 Networks
F5 Networks
added 2024/12/06 11:49 p.m.33 views

K000148895: Intel UEFI firmware vulnerabilities CVE-2023-2235, CVE-2023-23904, and CVE-2023-25546

Security Advisory Description CVE-2023-22351 Out-of-bounds write in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-23904 NULL pointer dereference in the UEFI firmware for some IntelR Processors may allo...

6.9CVSS7AI score0.00051EPSS
Exploits0
Cvelist
Cvelist
added 2024/07/03 6:0 a.m.14 views

CVE-2024-2235 Himer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRF

The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users vote on any polls, including those they don't have access to via a CSRF attack...

0.0009EPSS
Exploits2References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/07/02 11:9 a.m.14 views

Security Bulletin: IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack.(CVE-2024-2235)

Summary IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information, consume...

7CVSS6AI score0.0009EPSS
Exploits2Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.28 views

openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4) (SUSE-SU-2023:3055-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00594EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.26 views

openSUSE: Security Advisory for the Linux Kernel (Live Patch 2 for SLE 15 SP4) (SUSE-SU-2023:3079-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00594EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.29 views

openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 2 for SLE 15 SP4) (SUSE-SU-2023:3063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00594EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.20 views

openSUSE: Security Advisory for the Linux Kernel (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2023:3116-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00594EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.23 views

openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2023:3153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00594EPSS
Exploits3References2
OSV
OSV
added 2023/10/14 2:7 a.m.35 views

RLSA-2023:4541 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: use-after-free in l2capconnect and l2capleconnectreq in net/bluetooth/l2capcore.c CVE-2022-42896 kernel: tcindex: use-after-free...

8.1CVSS8.1AI score0.00421EPSS
Exploits2References7
Rows per page
Query Builder