Lucene search
K

122 matches found

Circl
Circl
added 2026/05/27 5:0 a.m.5 views

CVE-2026-2253

creationtimestamp| type| source ---|---|--- 2026-05-27 05:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmspyb5e7w2e 2026-05-27 05:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqr6mndi2i 2026-05-27 07:01:06+00:00| seen|...

7.7CVSS5.8AI score0.00032EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 8:52 a.m.4 views

CVE-2021-2253

Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain component: Core. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Supply Cha...

9.1CVSS7.2AI score0.01723EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-7096

Malware in sbrugna...

6.8CVSS6.4AI score0.0008EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2013-7097

Malware in sbrugna...

4.3CVSS6.4AI score0.00196EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2023-2253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query...

6.5CVSS7.2AI score0.00147EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:8 p.m.7 views

CVE-2020-2253

Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server...

5.8CVSS6.7AI score0.00036EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 10:15 a.m.5 views

CVE-2019-2253

Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607,...

9.8CVSS7.5AI score0.0037EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2025/05/21 4:3 p.m.5 views

K000151459: OpenShift vulnerability CVE-2023-2253

Security Advisory Description A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the...

6.5CVSS5.8AI score0.00147EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/11 7:11 a.m.18 views

CVE-2025-2253

The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3. This is due to the plugin not properly validating a verification code value prior to updating their password through the imicresetpasswordinit function. This makes it...

9.8CVSS7.5AI score0.00583EPSS
Exploits0References1
NVD
NVD
added 2025/05/09 7:16 a.m.11 views

CVE-2025-2253

The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3. This is due to the plugin not properly validating a verification code value prior to updating their password through the imicresetpasswordinit function. This makes it...

9.8CVSS0.00583EPSS
Exploits0References2
CVE
CVE
added 2025/05/09 6:42 a.m.44 views

CVE-2025-2253

CVE-2025-2253 affects the IMITHEMES Listing plugin (≤3.3). The issue is unauthenticated privilege escalation caused by the plugin not properly validating a verification code before updating passwords via imic_reset_password_init(), enabling password changes for any user (including admins) if the ...

9.8CVSS9.8AI score0.00583EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/09 6:42 a.m.5 views

CVE-2025-2253 IMITHEMES Listing <= 3.3 - Unauthenticated Privilege Escalation via Unverified Password Reset

The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3. This is due to the plugin not properly validating a verification code value prior to updating their password through the imicresetpasswordinit function. This makes it...

9.8CVSS9.8AI score0.00583EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.6 views

Azure Linux 3.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)

The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...

6.5CVSS6.1AI score0.00147EPSS
Exploits0References2
CBLMariner
CBLMariner
added 2024/09/13 6:9 p.m.13 views

CVE-2023-2253 affecting package cert-manager for versions less than 1.11.2-14

CVE-2023-2253 affecting package cert-manager for versions less than 1.11.2-14. A patched version of the package is available...

6.5CVSS6.8AI score0.00147EPSS
Exploits0
CBLMariner
CBLMariner
added 2024/08/25 3:13 p.m.17 views

CVE-2023-2253 affecting package cert-manager for versions less than 1.12.12-1

CVE-2023-2253 affecting package cert-manager for versions less than 1.12.12-1. An upgraded version of the package is available that resolves this issue...

6.5CVSS6.9AI score0.00147EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/08/08 2:30 p.m.14 views

Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to github.com/docker/distribution ( CVE-2023-2253 )

Summary Go module github.com/docker/distribution is used by IBM Cloud Pak for Data. CVE-2023-2253. Vulnerability Details CVEID:CVE-2023-2253 DESCRIPTION: Distribution is vulnerable to a denial of service, caused by improper input validation by the /v2/catalog endpoint. By sending a specially...

6.5CVSS6.4AI score0.00147EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/07/03 12:0 a.m.20 views

CBL Mariner 2.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)

The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...

6.5CVSS6.1AI score0.00147EPSS
Exploits0References2
CBLMariner
CBLMariner
added 2024/06/12 10:23 p.m.12 views

CVE-2023-2253 affecting package moby-compose for versions less than 2.17.3-5

CVE-2023-2253 affecting package moby-compose for versions less than 2.17.3-5. A patched version of the package is available...

6.5CVSS6.7AI score0.00147EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.12 views

RHEL 4 : perl-libwww-perl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - perl-libwww-perl: multiple HTTP client download filename vulnerability OCERT 2010-001 CVE-2010-2253 -...

6.8CVSS7AI score0.01131EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.27 views

RHEL 3 : perl-libwww-perl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 3 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-libwww-perl: multiple HTTP client download filename vulnerability OCERT 2010-001 CVE-2010-2253 Note that Nessu...

6.8CVSS6.6AI score0.01131EPSS
Exploits0References1
Rows per page
Query Builder