Lucene search
K

62 matches found

Nuclei
Nuclei
added yesterday33 views

Joomla! Component com_bfsurvey - Local File Inclusion

A directory traversal vulnerability in the BF Survey combfsurvey component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-2259 info: name: Joomla! Component combfsurvey - Local File Inclusion...

7.5CVSS5.8AI score0.03619EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/01/09 10:14 a.m.4 views

CVE-2019-2259

Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W,...

10CVSS7.5AI score0.0033EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/10/24 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2025-2259)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS6.7AI score0.00292EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-2259

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00345EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 11:15 a.m.3 views

CVE-2013-2259

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview...

9.8CVSS7.4AI score0.00715EPSS
Exploits0References1
Talos
Talos
added 2025/04/14 12:0 a.m.6 views

Eclipse ThreadX NetX Duo HTTP server chunked PUT request integer underflow vulnerability

Talos Vulnerability Report TALOS-2024-2104 Eclipse ThreadX NetX Duo HTTP server chunked PUT request integer underflow vulnerability April 14, 2025 CVE Number None,CVE-2025-2259 SUMMARY An integer underflow vulnerability exists in the HTTP server PUT request functionality of Eclipse ThreadX NetX D...

7.5CVSS8.3AI score0.00164EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/04/08 7:46 p.m.7 views

CVE-2025-2259

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length in one packet smaller than the data request size of the...

7.5CVSS7.2AI score0.00351EPSS
Exploits0References1
Circl
Circl
added 2025/04/06 7:44 p.m.2 views

CVE-2025-2259

creationtimestamp| type| source ---|---|--- 2025-04-06 19:44:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10638 2025-04-06 23:12:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm6kzzzsje2b 2025-04-07 00:20:07+00:00| seen|...

7.5CVSS7.6AI score0.00164EPSS
Exploits0References5
OSV
OSV
added 2025/04/06 7:15 p.m.5 views

CVE-2025-2259

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length in one packet smaller than the data request size of the...

7.5CVSS7.1AI score
Exploits0References3
Cvelist
Cvelist
added 2025/04/06 7:1 p.m.9 views

CVE-2025-2259 Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length in one packet smaller than the data request size of the...

5.3CVSS0.00164EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/08/22 12:0 a.m.7 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2024-2259)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.00343EPSS
Exploits0References2
Circl
Circl
added 2024/08/13 1:46 p.m.0 views

CVE-2024-2259

creationtimestamp| type| source ---|---|--- 2024-08-13 13:46:13+00:00| seen| https://t.me/cvedetector/3006...

6.4CVSS4.8AI score0.00733EPSS
Exploits0References1
NVD
NVD
added 2024/08/13 11:15 a.m.12 views

CVE-2024-2259

This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerabl...

6.4CVSS0.00733EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/05/15 12:0 a.m.18 views

Oracle Linux 9 : poppler (ELSA-2023-2259)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2259 advisory. 21.01.0-14 - Check for overflow when computing number of symbols - in JBIG2 text region - Resolves: 2126364 Tenable has extracted the preceding description bloc...

7.8CVSS8.1AI score0.00095EPSS
Exploits3References2
Circl
Circl
added 2023/04/25 12:19 a.m.0 views

CVE-2023-2259

creationtimestamp| type| source ---|---|--- 2023-04-25 00:19:36+00:00| seen| https://t.me/cibsecurity/62770...

9.1CVSS8AI score0.00504EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/04/24 12:0 a.m.5 views

CVE-2023-2259 Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...

9.1CVSS7AI score0.00504EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/04/24 12:0 a.m.14 views

CVE-2023-2259 Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...

9.1CVSS7.2AI score0.00504EPSS
Exploits1References2
CVE
CVE
added 2023/04/24 12:0 a.m.55 views

CVE-2023-2259

CVE-2023-2259 affects alfio-event/alf.io prior to 2.0-M4-2304. The issue is an improper neutralization of special elements used in a template engine, enabling server-side template injection. Impact is reported as high/critical in CVSS assessments (high in NVD 3.1, critical in other sources) with ...

9.1CVSS7.2AI score0.00504EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/04/24 12:0 a.m.12 views

CVE-2023-2259 Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...

9.1CVSS8.2AI score0.00504EPSS
Exploits1References4
OSV
OSV
added 2023/03/13 5:15 a.m.1 views

CVE-2022-2259

In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items...

4.3CVSS5.8AI score0.00119EPSS
Exploits0References1
Rows per page
Query Builder