Lucene search
K

16 matches found

Circl
Circl
added 2026/03/30 12:58 p.m.1 views

CVE-2018-25230

creationtimestamp| type| source ---|---|--- 2026-03-30 12:58:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibpo52z2z2g...

6.8CVSS5.8AI score0.0003EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/09 6:32 p.m.2 views

CVE-2026-25230

FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an authenticated user to modify the DOM and add e.g. form elements that call certain endpoints or link elements that redirect the user on active interaction. This vulnerability is...

4.6CVSS5.6AI score0.00057EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-25230

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00166EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:4 a.m.5 views

CVE-2022-25230

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325...

7.8CVSS7.3AI score0.00511EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:50 p.m.5 views

CVE-2020-25230

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device...

7.5CVSS6.6AI score0.001EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/04/25 6:49 p.m.14 views

CVE-2025-25230

Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Client for Windows is installed may be able to elevate privileges...

7.8CVSS6.7AI score0.0012EPSS
Exploits0References4
Circl
Circl
added 2025/04/16 10:43 p.m.3 views

CVE-2025-25230

creationtimestamp| type| source ---|---|--- 2025-04-16 22:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3lfldo2q 2025-04-17 02:06:41+00:00| seen| https://t.me/cvedetector/23202 2025-04-17 03:17:12+00:00| seen|...

7.8CVSS4.8AI score0.0012EPSS
Exploits0References3
CVE
CVE
added 2025/04/16 9:29 p.m.135 views

CVE-2025-25230

Affected product: Omnissa Horizon Client for Windows. Description: a local privilege escalation (LPE) vulnerability exists that could allow a local attacker with access to the Horizon Client installation to elevate privileges. Reported remediation: fixed version 2503 is available (per PacketStorm...

7.8CVSS7.5AI score0.0012EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/21 12:0 a.m.10 views

Siemens LOGO! 8 BM Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-25230)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device. This plugin only works with Tenable.ot. Please visi...

7.5CVSS7.4AI score0.001EPSS
Exploits0References3
Circl
Circl
added 2023/03/07 8:23 p.m.1 views

CVE-2023-25230

creationtimestamp| type| source ---|---|--- 2023-03-07 20:23:44+00:00| seen| https://t.me/cibsecurity/59602...

4.9CVSS5AI score0.00327EPSS
Exploits1References1
CVE
CVE
added 2023/03/07 12:0 a.m.53 views

CVE-2023-25230

The CVE-2023-25230 SSRF is reported in loonflow r2.0.14. The vulnerability arises from a flaw in the hook_url parameter, allowing an attacker to force the application to make arbitrary external requests. Public sources (e.g., PT-2023-19995, Red Hat, NVD) confirm the issue and describe potential i...

4.9CVSS5.2AI score0.00327EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/07 9:0 a.m.10 views

CVE-2022-25230

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325...

8.1AI score0.00511EPSS
Exploits0References1
CVE
CVE
added 2022/03/07 9:0 a.m.133 views

CVE-2022-25230

CX-Programmer in the CX-One v4.60 suite is affected by a Use-After-Free vulnerability (CVE-2022-25230) in versions up to 9.76.1, which can trigger information disclosure or arbitrary code execution when a user opens a crafted CXP file. The issue’s root cause is a use-after-free condition in CX-Pr...

7.8CVSS7.9AI score0.00511EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/02/04 7:36 p.m.58 views

CVE-2021-25230

The CVE-2021-25230 entry concerns Trend Micro Apex One (on‑prem and SaaS) and OfficeScan XG SP1 with an improper access control flaw that allows an unauthenticated user to obtain information from a scan connection exception file. Public disclosures map the vulnerability to a fault in the web cons...

5.3CVSS5AI score0.0038EPSS
Exploits0References3Affected Software2
Circl
Circl
added 2020/12/15 12:39 a.m.1 views

CVE-2020-25230

creationtimestamp| type| source ---|---|--- 2020-12-15 00:39:46+00:00| seen| https://t.me/cibsecurity/20795...

7.5CVSS7.8AI score0.001EPSS
Exploits0References1
CVE
CVE
added 2020/12/14 9:5 p.m.45 views

CVE-2020-25230

Siemens LOGO! 8 BM (incl. SIPLUS variants) is affected by CVE-2020-25230 due to use of an outdated cipher mode on port 10005/tcp, which could allow an attacker to extract the encryption key from captured traffic. Affected versions are all prior to v8.3. Siemens has released updates to version 8.3...

7.5CVSS7.3AI score0.001EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder