Lucene search
+L

15 matches found

OSV
OSV
•added 2026/09/29 9:38 a.m.•14 views

ROOT-OS-ALPINE-318-CVE-2024-23770 CVE-2024-23770 in darkhttpd - Patched by Root

Root has patched CVE-2024-23770 in the darkhttpd package for Root:Alpine:3.18. Multiple fixed versions available...

5.5CVSS5.9AI score0.00238EPSS
SaveExploits0
OSV
OSV
•added 2026/09/29 9:23 a.m.•12 views

ROOT-OS-ALPINE-319-CVE-2024-23770 CVE-2024-23770 in darkhttpd - Patched by Root

Root has patched CVE-2024-23770 in the darkhttpd package for Root:Alpine:3.19. Multiple fixed versions available...

5.5CVSS5.9AI score0.00238EPSS
SaveExploits0
CNVD
CNVD
•added 2026/01/19 12:00 a.m.•25 views

Mozilla Firefox and Mozilla Thunderbird information leakage vulnerabilities (CNVD-2026-23770)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Thunderbird is an email client software independently developed from the Mozilla Application Suite by the same organization. This software supports IMAP and POP email protocols, as well...

5.3CVSS6.1AI score0.00352EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/09 8:46 a.m.•11 views

CVE-2025-23770

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caspie Fast Tube fast-tube allows Reflected XSS.This issue affects Fast Tube: from n/a through = 2.3.1...

7.1CVSS7.2AI score0.00281EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:44 a.m.•20 views

CVE-2022-23770

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal...

9.8CVSS7.4AI score0.01508EPSS
SaveExploits0References1
Circl
Circl
•added 2025/01/22 3:20 p.m.•12 views

CVE-2025-23770

creationtimestamp| type| source ---|---|--- 2025-01-22 15:20:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo6t7x4v2e 2025-01-23 17:03:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2768...

7.1CVSS8.7AI score0.00281EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/22 3:15 p.m.•12 views

CVE-2025-23770

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caspie Fast Tube fast-tube allows Reflected XSS.This issue affects Fast Tube: from n/a through = 2.3.1...

7.1CVSS0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:29 p.m.•6 views

CVE-2025-23770 WordPress Fast Tube plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caspie Fast Tube fast-tube allows Reflected XSS.This issue affects Fast Tube: from n/a through = 2.3.1...

7.1CVSS7.2AI score0.00281EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/22 2:29 p.m.•71 views

CVE-2025-23770

CVE-2025-23770 is a reflected XSS affecting the WordPress plugin Fast Tube (notFound Fast Tube), with impact up to version 2.3.1. The CVSS 3.1 base score is 7.1 (HIGH), attack vector NETWORK, attack complexity LOW, privileges NONE, user interaction REQUIRED, and the vulnerability involves imprope...

7.1CVSS7.2AI score0.00281EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/08/06 12:00 a.m.•34 views

Fedora: Security Advisory (FEDORA-2024-d638b9a34c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.01055EPSS
SaveExploits0References7
OSV
OSV
•added 2024/01/22 4:15 a.m.•9 views

ALPINE-CVE-2024-23770

darkhttpd through 1.15 allows local users to discover credentials for --auth by listing processes and their arguments...

5.5CVSS6.7AI score0.00238EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/22 12:00 a.m.•67 views

CVE-2024-23770

Darkhttpd prior to 1.16 (notably 1.15) is affected: local users can enumerate credentials used by --auth by listing processes and their arguments. Fedora advisories/Fedora OSS notes indicate update to darkhttpd 1.16 fixes this issue. In practice, affected product: darkhttpd HTTP server; root caus...

5.5CVSS5.3AI score0.00238EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/08/29 8:47 a.m.•43 views

CVE-2023-23770

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

9.4CVSS9.7AI score0.00541EPSS
SaveExploits0References1
CVE
CVE
•added 2022/10/17 12:00 a.m.•73 views

CVE-2022-23770

CVE-2022-23770 affects WISA Smart Wing CMS (WISA Korea). The connected documents describe a remote command execution risk caused by improper validation of parameters of certain API constructors, enabling exploits such as directory traversal. The vulnerability is reported across multiple feeds, bu...

9.8CVSS9.5AI score0.01508EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/10/17 12:00 a.m.•12 views

CVE-2022-23770 WISA Smart Wing CMS Remote Command Execution Vulnerability

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal...

8.8CVSS7.4AI score0.01508EPSS
SaveExploits0References1
Rows per page
Query Builder