Lucene search
+L

121 matches found

OSV
OSV
added 2026/05/28 3:48 p.m.7 views

MINI-637Q-GQM9-2266

Bulletin has no description...

5.3CVSS5.7AI score0.00322EPSS
Exploits0
OSV
OSV
added 2026/04/29 1:47 p.m.10 views

MINI-2266-HQGJ-FVP4

Bulletin has no description...

8.7CVSS4.8AI score0.00713EPSS
Exploits0
OSV
OSV
added 2026/01/29 12:44 a.m.3 views

CGA-2266-XCQQ-QPF4

Bulletin has no description...

5.8CVSS5.8AI score0.10608EPSS
Exploits1
EUVD
EUVD
added 2026/01/13 3:31 p.m.3 views

EUVD-2026-2266

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...

5.7AI score0.00151EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2013-2440

Malware in sbrugna...

4.9CVSS6.4AI score0.01166EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/21 6:34 p.m.8 views

CVE-2009-2266

OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information session details and order history of other users via a crafted cookie...

5CVSS6.4AI score0.01076EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/03/29 7:35 p.m.536 views

Exploit for CVE-2025-2266

🚨 CVE-2025-2266 — WordPress Plugin Exploit 🔍 Vulnerability...

9.8CVSS7.7AI score0.00678EPSS
Exploits1
Circl
Circl
added 2025/03/29 7:28 a.m.14 views

CVE-2025-2266

creationtimestamp| type| source ---|---|--- 2025-03-29 07:28:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9538 2025-03-29 08:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lliwlmvy752m 2025-03-29 09:31:14+00:00| seen|...

9.8CVSS8.7AI score0.00678EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/03/29 7:3 a.m.7 views

CVE-2025-2266 Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated...

9.8CVSS7.4AI score0.00678EPSS
Exploits1References3
CVE
CVE
added 2025/03/29 7:3 a.m.103 views

CVE-2025-2266

The CVE-2025-2266 entry concerns the WordPress plugin Checkout Mestres do WP for WooCommerce. Affected versions: 8.6.5–8.7.5. Root cause: a missing capability check in cwmpUpdateOptions() that allows unauthenticated modification of options. Impact: attackers can update arbitrary WordPress options...

9.8CVSS7.7AI score0.00678EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/03/29 7:3 a.m.28 views

CVE-2025-2266 Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated...

9.8CVSS0.00678EPSS
Exploits1References3
OSV
OSV
added 2024/06/06 12:8 p.m.12 views

CGA-2266-3X5X-7XHM

Bulletin has no description...

7.5CVSS7AI score0.01042EPSS
Exploits0
CVE
CVE
added 2024/03/07 9:31 p.m.83 views

CVE-2024-2266

CVE-2024-2266 affects keerti1924 Secret-Coder-PHP-Project 1.0, specifically the Login Page file /login.php. The vulnerability is caused by improper handling of the parameters emailcookie and passwordcookie, enabling remote cross-site scripting (XSS) . Exploitation is possible remotely and the exp...

6.1CVSS3.7AI score0.00472EPSS
Exploits1References3Affected Software1
Circl
Circl
added 2023/12/21 10:37 a.m.7 views

CVE-2023-2266

creationtimestamp| type| source ---|---|--- 2023-12-21 10:37:50+00:00| seen| https://t.me/ctinow/157582...

6.1CVSS6.1AI score0.00405EPSS
Exploits0References1
NVD
NVD
added 2023/11/30 5:15 p.m.22 views

CVE-2023-2266

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...

6.1CVSS0.00405EPSS
Exploits0References1
CVE
CVE
added 2023/11/30 4:57 p.m.41 views

CVE-2023-2266

The CVE-2023-2266 entry concerns Schweitzer Engineering Laboratories SEL-411L, where an improper neutralization of input during web page generation enables cross-site scripting (XSS). The root cause is input handling during web page rendering, allowing an attacker to execute scripts in the contex...

6.1CVSS5.1AI score0.00405EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 4:57 p.m.32 views

CVE-2023-2266 Improper neutralization of input during web page generation could lead to cross-site scripting based attacks

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...

4.3CVSS6.2AI score0.00405EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/05 12:0 a.m.38 views

Amazon Linux 2 : vim (ALAS-2023-2266)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2266 advisory. vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service DoS via the exbufferall method. CVE-2021-3236 Use After Free in GitHub repository vim/vim...

7.8CVSS6.5AI score0.00624EPSS
Exploits9References20
SUSE CVE
SUSE CVE
added 2023/02/15 6:8 a.m.3 views

SUSE CVE-2008-2266

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...

4.4CVSS6.8AI score0.00322EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/01/03 12:0 a.m.14 views

ISC BIND DoS Vulnerability (CVE-2013-2266) - Linux

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.8CVSS7.4AI score0.42851EPSS
Exploits1References2
Rows per page
Query Builder