Lucene search
K

106 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 11:3 p.m.3 views

CVE-2026-2484

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information exposure vulnerability caused by overly verbose error messages...

4.3CVSS5.8AI score0.00013EPSS
Exploits0References1
Circl
Circl
added 2026/03/26 12:4 a.m.2 views

CVE-2026-2484

creationtimestamp| type| source ---|---|--- 2026-03-26 00:04:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwckpxssk2i...

4.3CVSS5.8AI score0.00013EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 8:36 p.m.8 views

CVE-2026-2484

IBM InfoSphere Information Server is affected by an information-exposure vulnerability (CVE-2026-2484) caused by overly verbose error messages. Affected versions are InfoSphere Information Server 11.7.0.0 to 11.7.1.6. The issue is CVSS Base 4.3 (Vector: CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A...

4.3CVSS5.8AI score0.00013EPSS
Exploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/24 9:20 p.m.4 views

Security Bulletin: IBM InfoSphere Information Server is vulnerable due to information exposure (CVE-2026-2484)

Summary An information exposure vulnerability was addressed in IBM InfoSphere Information Server. Vulnerability Details CVEID:CVE-2026-2484 DESCRIPTION: InfoSphere Information Server is affected by an information exposure vulnerability caused by overly verbose error messages. CWE:CWE-209:...

4.3CVSS5.8AI score0.00013EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/12/08 1:49 a.m.1 views

CGA-2484-VG2R-37FJ

Bulletin has no description...

6.5CVSS6.9AI score0.00008EPSS
Exploits0
OSV
OSV
added 2025/11/02 8:58 p.m.2 views

MINI-2368-2484-G2MR

Bulletin has no description...

4.3CVSS7AI score0.00024EPSS
Exploits0
OSV
OSV
added 2025/09/08 3:51 p.m.2 views

CGA-8JCQ-2484-6W9X

Bulletin has no description...

7.5CVSS6.6AI score0.00063EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 7:23 p.m.7 views

CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.1CVSS6.9AI score0.01352EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/15 12:0 a.m.12 views

RHEL 8 : firefox (RHSA-2025:2484)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:2484 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

8.8CVSS6.9AI score0.00487EPSS
Exploits1References20
RedhatCVE
RedhatCVE
added 2025/02/05 9:15 p.m.9 views

CVE-2022-2484

The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could result in the execution of a malicious kernel, arbitrary programs, or modified Nokia programs...

8.4CVSS6.9AI score0.00055EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/22 2:1 a.m.16 views

CVE-2024-2484 Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

6.4CVSS6AI score0.00225EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/06/22 2:1 a.m.22 views

CVE-2024-2484 Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Services and Post Type Grid widgets in all versions up to, and including, 2.10.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

6.4CVSS0.00225EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/06/21 12:0 a.m.8 views

WordPress Orbit Fox by ThemeIsle Plugin <= 2.10.34 is vulnerable to Cross Site Scripting (XSS)

Software Orbit Fox by ThemeIsle Type Plugin Vulnerable versions = 2.10.34 Fixed in 2.10.35 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2484 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 507ddf38e324 Credits wesley wcraft...

6.4CVSS6AI score0.00225EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:0 a.m.34 views

Amazon Linux 2 : shim (ALAS-2024-2484)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2484 advisory. A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious...

8.3CVSS7.8AI score0.03784EPSS
Exploits0References4
Prion
Prion
added 2024/02/14 8:15 p.m.18 views

Design/Logic Flaw

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite implementation of the RPL protocol in the Contiki-NG operating system. This vulnerability is caused by insufficient control of the lengths for...

5CVSS7.3AI score0.00417EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/14 7:22 p.m.15 views

CVE-2023-50927 Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite implementation of the RPL protocol in the Contiki-NG operating system. This vulnerability is caused by insufficient control of the lengths for...

8.6CVSS8.8AI score0.00417EPSS
Exploits0References2
CVE
CVE
added 2023/06/09 5:33 a.m.43 views

CVE-2023-2484

CVE-2023-2484 : The Active Directory Integration / LDAP Integration plugin for WordPress is affected in versions up to 4.1.4 by time-based SQL Injection via the vulnerable orderby and order parameters due to insufficient escaping and lack of proper SQL preparation. Exploitation requires authentic...

7.2CVSS6AI score0.00456EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2023/05/15 12:0 a.m.7 views

WordPress Active Directory Integration / LDAP Integration Plugin <= 4.1.4 is vulnerable to SQL Injection

Software Active Directory Integration / LDAP Integration Type Plugin Vulnerable versions = 4.1.4 Fixed in 4.1.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2484 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 166c0938a64d Credits Marco Wotschka...

7.2CVSS6.8AI score0.00456EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.21 views

Debian: Security Advisory (DSA-2310-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.7AI score0.04324EPSS
Exploits13References3
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.20 views

Debian: Security Advisory (DSA-2303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.6AI score0.04324EPSS
Exploits13References3
Rows per page
Query Builder