Lucene search
K

19 matches found

Circl
Circl
added 2026/04/04 3:0 a.m.2 views

CVE-2025-23970

creationtimestamp| type| source ---|---|--- 2026-04-04 03:00:05+00:00| published-proof-of-concept| Telegram/7Ka92ZktN6KhnkFfP8rgWwSyfUtl8VaXBMYWOC8bY9QwTk 2026-04-04 08:05:46+00:00| published-proof-of-concept| Telegram/pojO2mXcOuLUz1SLRhtJDDTDN8cBkdjJEYQZSRfL-908A 2026-04-17 10:52:40+00:00|...

9.8CVSS4.8AI score0.00377EPSS
Exploits0
NVD
NVD
added 2025/07/04 12:15 p.m.4 views

CVE-2025-23970

Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking sf-booking allows Privilege Escalation.This issue affects Service Finder Booking: from n/a through = 6.1...

9.8CVSS0.00377EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/04 11:18 a.m.10 views

CVE-2025-23970 WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking sf-booking allows Privilege Escalation.This issue affects Service Finder Booking: from n/a through = 6.1...

9.8CVSS0.00377EPSS
Exploits0References1
CVE
CVE
added 2025/07/04 11:18 a.m.22 views

CVE-2025-23970

CVE-2025-23970 concerns the WordPress plugin for aonetheme Service Finder Booking, with an Incorrect Privilege Assignment vulnerability that enables Privilege Escalation . Affected software: Service Finder Booking up to version 6.0. Root cause and impact are stated across Connected documents: mis...

9.8CVSS5.9AI score0.00377EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:43 a.m.4 views

CVE-2024-23970

This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CURLOPTSSLVERIFYHOST setting. The issue...

6.5CVSS6.8AI score0.00126EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:12 a.m.7 views

CVE-2023-23970

Unrestricted Upload of File with Dangerous Type vulnerability in WooRockets Corsa.This issue affects Corsa: from n/a through 1.5...

9.9CVSS8AI score0.00314EPSS
Exploits0References1
Circl
Circl
added 2025/01/30 11:46 p.m.5 views

CVE-2024-23970

creationtimestamp| type| source ---|---|--- 2025-01-30 23:46:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113919969185194340 2025-01-31 00:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgypvjn4fb2c 2025-01-31 01:12:07+00:00| seen|...

6.5CVSS6.6AI score0.00126EPSS
Exploits0References7
Circl
Circl
added 2023/12/20 9:23 p.m.2 views

CVE-2023-23970

creationtimestamp| type| source ---|---|--- 2023-12-20 21:23:54+00:00| seen| https://t.me/ctinow/157313 2024-01-14 07:11:57+00:00| seen| https://t.me/ctinow/167945 2025-04-24 15:06:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13245...

9.9CVSS8.1AI score0.00314EPSS
Exploits0References3
OSV
OSV
added 2023/12/20 8:15 p.m.2 views

CVE-2023-23970

Unrestricted Upload of File with Dangerous Type vulnerability in WooRockets Corsa.This issue affects Corsa: from n/a through 1.5...

8.8CVSS5.8AI score0.00314EPSS
Exploits0References1
CVE
CVE
added 2023/12/20 7:24 p.m.29 views

CVE-2023-23970

CVE-2023-23970 affects WooRockets Corsa (WordPress Corsa Theme) up to version 1.5, enabling an Unrestricted Upload of File with Dangerous Type . Root cause: inadequate validation of uploaded files leading to arbitrary file uploads. Impact stated as high/critical in multiple sources; affected scop...

9.9CVSS8AI score0.00314EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/04/07 10:36 p.m.1 views

CVE-2022-23970

creationtimestamp| type| source ---|---|--- 2022-04-07 22:36:49+00:00| seen| https://t.me/cibsecurity/40322...

8.1CVSS7.9AI score0.00074EPSS
Exploits0References1
CVE
CVE
added 2022/04/07 6:22 p.m.86 views

CVE-2022-23970

The CVE-2022-23970 entry concerns the ASUS RT-AX56U router. A path traversal flaw exists in the update_json function due to insufficient filtering of special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same filena...

8.1CVSS8.1AI score0.00074EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/07 6:22 p.m.14 views

CVE-2022-23970 ASUS RT-AX56U - Path Traversal

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...

8.1CVSS8.3AI score0.00074EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/11/08 12:0 a.m.19 views

Mozilla Firefox Security Advisory (MFSA2021-07) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2021-07. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

8.8CVSS7.2AI score0.01222EPSS
Exploits1References12
Circl
Circl
added 2021/02/26 7:38 a.m.3 views

CVE-2021-23970

creationtimestamp| type| source ---|---|--- 2021-02-26 07:38:32+00:00| seen| https://t.me/cibsecurity/24199...

6.5CVSS6.8AI score0.00292EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/02/26 2:15 a.m.31 views

CVE-2021-23970

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox 86...

6.5CVSS6.9AI score0.00292EPSS
Exploits0References5
CVE
CVE
added 2021/02/26 1:57 a.m.167 views

CVE-2021-23970

CVE-2021-23970 affects Mozilla Firefox prior to version 86. The issue arises from context-specific code included in a shared jump table, triggering assertions in multithreaded WebAssembly code. Affected product: Firefox (older than 86). Root cause: shared jump-table context-specific code leading ...

6.5CVSS6.6AI score0.00292EPSS
Exploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2021/02/26 1:57 a.m.48 views

CVE-2021-23970

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox 86...

6.5CVSS6.9AI score0.00292EPSS
Exploits0
Debian CVE
Debian CVE
added 2021/02/26 1:57 a.m.25 views

CVE-2021-23970

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox 86...

6.5CVSS8.3AI score0.00292EPSS
Exploits0
Rows per page
Query Builder