Lucene search
K

67 matches found

OSV
OSV
added 2025/11/18 10:27 a.m.1 views

MINI-RM64-QR6C-2358

Bulletin has no description...

5.5CVSS6.9AI score0.00105EPSS
Exploits0
Circl
Circl
added 2025/10/03 6:7 p.m.1 views

CVE-2014-2358

creationtimestamp| type| source ---|---|--- 2025-10-03 18:07:50+00:00| seen| Telegram/i3cbuKqIWdwKOPFybv3XLD7yG6Rlyg694cwtRxOHhn5Llg...

6.8CVSS4.8AI score0.00054EPSS
Exploits0
OSV
OSV
added 2025/08/25 3:17 p.m.1 views

CGA-C8R6-2358-XFJV

Bulletin has no description...

7.7CVSS6AI score0.00529EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:54 a.m.4 views

CVE-2023-2358

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext...

4.9CVSS6.8AI score0.00059EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:18 p.m.5 views

CVE-2021-2358

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Rest interfaces for Access Mgr. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Acces...

4.9CVSS6AI score0.00616EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:42 a.m.7 views

CVE-2013-2358

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2359, and CVE-2013-2360...

4CVSS6.1AI score0.00241EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:58 a.m.7 views

CVE-2016-2358

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts...

9.8CVSS7AI score0.00836EPSS
Exploits1References1
Circl
Circl
added 2025/03/17 3:47 a.m.2 views

CVE-2025-2358

creationtimestamp| type| source ---|---|--- 2025-03-17 03:47:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7733 2025-03-17 05:41:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkkgy3a2sb26 2025-03-17 07:25:48+00:00| seen| https://t.me/cvedetector/20...

6.5CVSS6.2AI score0.0009EPSS
Exploits0References3
NVD
NVD
added 2025/03/17 3:15 a.m.13 views

CVE-2025-2358

A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Kfxt/Service.asmx of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For lead...

6.5CVSS0.0009EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/17 3:0 a.m.6 views

CVE-2025-2358 Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System HTTP Header Service.asmx sql injection

A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Kfxt/Service.asmx of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For lead...

6.5CVSS6.8AI score0.0009EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/03/17 3:0 a.m.14 views

CVE-2025-2358 Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System HTTP Header Service.asmx sql injection

A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Kfxt/Service.asmx of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For lead...

6.5CVSS0.0009EPSS
Exploits0References4
CVE
CVE
added 2025/03/17 3:0 a.m.64 views

CVE-2025-2358

CVE-2025-2358 affects Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. The vulnerability is an SQL injection in the HTTP Header Handler, triggered by manipulating the X-Forwarded-For argument in requests to /Kfxt/Service.asmx. It is described as remotely exploitable and has...

6.5CVSS6.8AI score0.0009EPSS
Exploits0References4
CVE
CVE
added 2024/05/16 9:3 a.m.52 views

CVE-2024-2358

The CVE-2024-2358 path-traversal vulnerability affects parisneo/lollms-webui, exposed via the /apply_settings endpoint where unsanitized user input in the extensions parameter enables navigation to arbitrary directories. An attacker could craft a payload with ../../../ sequences to load and execu...

9.8CVSS8.1AI score0.03158EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/05/16 9:3 a.m.9 views

CVE-2024-2358 Path Traversal leading to Remote Code Execution in parisneo/lollms-webui

A path traversal vulnerability in the '/applysettings' endpoint of parisneo/lollms-webui allows attackers to execute arbitrary code. The vulnerability arises due to insufficient sanitization of user-supplied input in the configuration settings, specifically within the 'extensions' parameter...

9.8CVSS10AI score0.03158EPSS
Exploits1References1
Circl
Circl
added 2024/01/27 2:11 p.m.0 views

CVE-2016-2358

creationtimestamp| type| source ---|---|--- 2024-01-27 14:11:20+00:00| seen| https://t.me/ctinow/174772...

9.8CVSS8.7AI score0.00836EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2023/12/04 12:0 a.m.17 views

Amazon Linux 2 : indent (ALAS-2023-2358)

The version of indent installed on the remote host is prior to 2.2.11-13. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2358 advisory. GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file. CVE-2023-40305 Tenable has...

5.5CVSS6AI score0.00067EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/09/26 9:34 p.m.14 views

CVE-2023-2358 Hitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext...

4.3CVSS5.4AI score0.00059EPSS
Exploits0References1
CVE
CVE
added 2023/09/26 9:34 p.m.33 views

CVE-2023-2358

Summary: CVE-2023-2358 affects Hitachi Vantara Pentaho Business Analytics Server. The issue is that the Hadoop Copy Files step stores passwords in plaintext, exposing sensitive credentials. Affected versions: Pentaho Server before 9.5.0.0, before 9.3.0.4, and version 8.3.x.x. Root cause: configur...

4.9CVSS4.7AI score0.00059EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/06/05 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2023:2358-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS6.9AI score0.04726EPSS
Exploits5References10
Cvelist
Cvelist
added 2021/12/20 10:44 p.m.4 views

CVE-2019-2358

...

Exploits0
Rows per page
Query Builder