Lucene search
K

120 matches found

OSV
OSV
added 2026/05/28 3:48 p.m.4 views

MINI-637Q-GQM9-2266

Bulletin has no description...

5.3CVSS5.7AI score0.00019EPSS
Exploits0
OSV
OSV
added 2026/04/29 1:47 p.m.1 views

MINI-2266-HQGJ-FVP4

Bulletin has no description...

8.7CVSS4.8AI score0.00067EPSS
Exploits0
OSV
OSV
added 2026/01/29 12:44 a.m.1 views

CGA-2266-XCQQ-QPF4

Bulletin has no description...

5.8CVSS5.8AI score0.00485EPSS
Exploits1
EUVD
EUVD
added 2026/01/13 3:31 p.m.1 views

EUVD-2026-2266

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...

5.7AI score0.00016EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-2440

Malware in sbrugna...

4.9CVSS6.4AI score0.01036EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/21 6:34 p.m.5 views

CVE-2009-2266

OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information session details and order history of other users via a crafted cookie...

5CVSS6.4AI score0.0025EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/03/29 7:35 p.m.510 views

Exploit for CVE-2025-2266

🚨 CVE-2025-2266 — WordPress Plugin Exploit 🔍 Vulnerability...

9.8CVSS7.7AI score0.00403EPSS
Exploits1
Circl
Circl
added 2025/03/29 7:28 a.m.10 views

CVE-2025-2266

creationtimestamp| type| source ---|---|--- 2025-03-29 07:28:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9538 2025-03-29 08:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lliwlmvy752m 2025-03-29 09:31:14+00:00| seen|...

9.8CVSS8.7AI score0.00403EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/03/29 7:3 a.m.7 views

CVE-2025-2266 Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated...

9.8CVSS7.4AI score0.00403EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/03/29 7:3 a.m.16 views

CVE-2025-2266 Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated...

9.8CVSS0.00403EPSS
Exploits1References3
CVE
CVE
added 2025/03/29 7:3 a.m.85 views

CVE-2025-2266

The CVE-2025-2266 entry concerns the WordPress plugin Checkout Mestres do WP for WooCommerce. Affected versions: 8.6.5–8.7.5. Root cause: a missing capability check in cwmpUpdateOptions() that allows unauthenticated modification of options. Impact: attackers can update arbitrary WordPress options...

9.8CVSS7.7AI score0.00403EPSS
Exploits1References3
OSV
OSV
added 2024/06/06 12:8 p.m.10 views

CGA-2266-3X5X-7XHM

Bulletin has no description...

7.5CVSS7AI score0.02017EPSS
Exploits0
CVE
CVE
added 2024/03/07 9:31 p.m.63 views

CVE-2024-2266

CVE-2024-2266 affects keerti1924 Secret-Coder-PHP-Project 1.0, specifically the Login Page file /login.php. The vulnerability is caused by improper handling of the parameters emailcookie and passwordcookie, enabling remote cross-site scripting (XSS) . Exploitation is possible remotely and the exp...

6.1CVSS3.7AI score0.00069EPSS
Exploits1References3Affected Software1
Circl
Circl
added 2023/12/21 10:37 a.m.0 views

CVE-2023-2266

creationtimestamp| type| source ---|---|--- 2023-12-21 10:37:50+00:00| seen| https://t.me/ctinow/157582...

6.1CVSS6.1AI score0.00259EPSS
Exploits0References1
NVD
NVD
added 2023/11/30 5:15 p.m.9 views

CVE-2023-2266

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...

6.1CVSS0.00259EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/30 4:57 p.m.14 views

CVE-2023-2266 Improper neutralization of input during web page generation could lead to cross-site scripting based attacks

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...

4.3CVSS6.2AI score0.00259EPSS
Exploits0References1
CVE
CVE
added 2023/11/30 4:57 p.m.30 views

CVE-2023-2266

The CVE-2023-2266 entry concerns Schweitzer Engineering Laboratories SEL-411L, where an improper neutralization of input during web page generation enables cross-site scripting (XSS). The root cause is input handling during web page rendering, allowing an attacker to execute scripts in the contex...

6.1CVSS5.1AI score0.00259EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/05 12:0 a.m.35 views

Amazon Linux 2 : vim (ALAS-2023-2266)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2266 advisory. vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service DoS via the exbufferall method. CVE-2021-3236 Use After Free in GitHub repository vim/vim...

7.8CVSS6.5AI score0.00074EPSS
Exploits9References20
SUSE CVE
SUSE CVE
added 2023/02/15 6:8 a.m.1 views

SUSE CVE-2008-2266

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...

4.4CVSS6.8AI score0.00048EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/01/03 12:0 a.m.12 views

ISC BIND DoS Vulnerability (CVE-2013-2266) - Linux

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.8CVSS7.4AI score0.44844EPSS
Exploits1References2
Rows per page
Query Builder