Lucene search
K

85 matches found

OSV
OSV
added 2026/05/10 10:0 p.m.1 views

MINI-2428-MRC6-PFW6

Bulletin has no description...

3.7CVSS5.7AI score0.00083EPSS
Exploits1
Circl
Circl
added 2026/02/27 4:25 a.m.2 views

CVE-2026-2428

creationtimestamp| type| source ---|---|--- 2026-02-27 04:25:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsujguooy2h 2026-02-27 04:25:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsukebi762k 2026-02-27 05:23:59+00:00| seen|...

7.5CVSS4.7AI score0.00035EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-7727

Malware in sbrugna...

1.9CVSS6.1AI score0.00399EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-2428

Malicious code in bioql PyPI...

7.8CVSS8.6AI score0.00725EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2016-2428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libAACdec/src/aacdecdrc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limi...

10CVSS8.8AI score0.01215EPSS
Exploits0References2
Circl
Circl
added 2025/07/10 9:25 a.m.7 views

CVE-2025-2428

creationtimestamp| type| source ---|---|--- 2025-07-10 09:25:23+00:00| seen| https://poliverso.org/objects/0477a01e-4ebdede6-5217a3193b0d7a46...

6.9AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:53 a.m.6 views

CVE-2023-2428

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

6.1CVSS5.9AI score0.00168EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:29 a.m.5 views

CVE-2012-2428

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

10CVSS8.1AI score0.02436EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/03/27 12:36 a.m.1 views

SUSE CVE-2011-2428

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service browser crash via unspecified vectors, related to a "logic error issue."...

9.3CVSS7.9AI score0.02666EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2024/09/12 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2024-2428)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS5.6AI score0.0095EPSS
Exploits1References2
OSV
OSV
added 2024/06/06 12:9 p.m.8 views

CGA-2428-2RR3-5X8W

Bulletin has no description...

6.4CVSS7.2AI score0.03204EPSS
Exploits1
Rosalinux
Rosalinux
added 2024/06/03 8:20 a.m.19 views

Advisory ROSA-SA-2024-2428

software: djvulibre 3.5.28 WASP: ROSA-CHROME packageevrstring: djvulibre-3.5.28-4 CVE-ID: CVE-2021-3500 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A flaw was discovered in djvulibre. A stack overflow in DJVU::DjVuDocument::getdjvufile via a created djvu file may cause the application to crash and...

7.8CVSS7.5AI score0.00296EPSS
Exploits2
Vulnrichment
Vulnrichment
added 2024/04/10 5:0 a.m.12 views

CVE-2024-2428 The Ultimate Video Player For WordPress < 2.2.3 - Contributor+ Stored XSS

The Ultimate Video Player For WordPress WordPress plugin before 2.2.3 does not have proper capability check when updating its settings via a REST route, allowing Contributor and above users to update them. Furthermore, due to the lack of escaping in one of the settings, this also allows them to...

5.9AI score0.00157EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/04/10 5:0 a.m.18 views

CVE-2024-2428 The Ultimate Video Player For WordPress < 2.2.3 - Contributor+ Stored XSS

The Ultimate Video Player For WordPress WordPress plugin before 2.2.3 does not have proper capability check when updating its settings via a REST route, allowing Contributor and above users to update them. Furthermore, due to the lack of escaping in one of the settings, this also allows them to...

5.6AI score0.00157EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2024/01/23 12:0 a.m.19 views

Amazon Linux 2 : dbus (ALAS-2024-2428)

The version of dbus installed on the remote host is prior to 1.10.24-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2428 advisory. D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon...

6.5CVSS6.7AI score0.0094EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:0 a.m.23 views

GitLab 15.0 < 15.1.6 / 15.2 < 15.2.4 / 15.3 < 15.3.2 (CVE-2022-2428)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests CVE-2022-2428...

7.3CVSS7.5AI score0.00181EPSS
Exploits0References4
Circl
Circl
added 2023/04/30 7:28 a.m.0 views

CVE-2023-2428

creationtimestamp| type| source ---|---|--- 2023-04-30 07:28:28+00:00| seen| https://t.me/cibsecurity/63117 2025-01-30 19:12:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3506...

6.1CVSS6.3AI score0.00168EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/04/30 12:0 a.m.8 views

CVE-2023-2428 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

6.1CVSS5.6AI score0.00168EPSS
Exploits0References2
CVE
CVE
added 2023/04/30 12:0 a.m.47 views

CVE-2023-2428

This CVE refers to phpMyFAQ prior to version 3.1.13, where a stored XSS vulnerability exists in the name field of the add question module in thorsten/phpmyfaq. The underlying issue is a stored XSS in user-supplied input that is kept in the database and rendered without proper sanitization, enabli...

6.1CVSS5.4AI score0.00168EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:13 a.m.1 views

SUSE CVE-2015-7829

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows mishandle junctions in the Synchronizer directory, which allows attackers to delete...

1.9CVSS6.7AI score0.00399EPSS
Exploits0References3
Rows per page
Query Builder