Lucene search
K

25 matches found

Circl
Circl
added 2026/04/05 11:29 p.m.1 views

CVE-2019-25698

creationtimestamp| type| source ---|---|--- 2026-04-05 23:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvqhcun42g 2026-04-07 21:20:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miwpgk3yl22a...

9.1CVSS5.9AI score0.0004EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/04/05 8:45 p.m.0 views

CVE-2019-25698 Kados R10 GreenBee SQL Injection via id_to_delete Parameter

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the idtodelete parameter. Attackers can send crafted requests with malicious SQL statements in the idtodelete field to extract or modify sensitive database...

8.8CVSS6AI score0.0004EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/06 4:30 a.m.2 views

CVE-2026-25698

Not used...

5.3AI score
Exploits0References1
Circl
Circl
added 2026/01/20 8:4 a.m.1 views

CVE-2022-25698

creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

8.4CVSS5AI score0.0005EPSS
Exploits0References1
NVD
NVD
added 2024/04/04 6:15 p.m.14 views

CVE-2024-25698

There is a reflected cross site scripting vulnerability in the home application in Esri Portal for ArcGIS 11.1 and below on Windows and Linux that allows a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the...

6.1CVSS6.6AI score0.00412EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/04 5:54 p.m.20 views

CVE-2024-25698 Reflected XSS in Portal for ArcGIS

There is a reflected cross site scripting vulnerability in the home application in Esri Portal for ArcGIS 11.1 and below on Windows and Linux that allows a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the...

6.1CVSS6.5AI score0.00412EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/07/15 12:0 a.m.2 views

PT-2023-25698 · Sourcecodester · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue affects the HTTP POST Request Handler component, specifically the file /classes/Master.php?f=save inquiry. The manipulation of the id argument leads to...

9.8CVSS6.9AI score0.00047EPSS
Exploits0References6
Circl
Circl
added 2023/05/18 2:32 p.m.0 views

CVE-2023-25698

creationtimestamp| type| source ---|---|--- 2023-05-18 14:32:25+00:00| seen| https://t.me/cibsecurity/64394...

8.8CVSS8.6AI score0.00104EPSS
Exploits0References1
NVD
NVD
added 2023/05/18 11:15 a.m.6 views

CVE-2023-25698

Cross-Site Request Forgery CSRF vulnerability in Studio Wombat Shoppable Images plugin = 1.2.3 versions...

8.8CVSS6.5AI score0.00104EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/18 10:45 a.m.11 views

CVE-2023-25698 WordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Studio Wombat Shoppable Images plugin = 1.2.3 versions...

5.4CVSS9AI score0.00104EPSS
Exploits0References1
CVE
CVE
added 2023/05/18 10:45 a.m.28 views

CVE-2023-25698

CVE-2023-25698: CSRF in WordPress Shoppable Images Lite plugin = 1.2.4.

8.8CVSS7.1AI score0.00104EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/18 10:45 a.m.6 views

CVE-2023-25698 WordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Studio Wombat Shoppable Images plugin = 1.2.3 versions...

5.4CVSS8.8AI score0.00104EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/02/13 12:0 a.m.7 views

WordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Shoppable Images Lite Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25698 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID d071aa365d52 Credits Rio Darmawan...

8.8CVSS7AI score0.00104EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/12/13 12:0 a.m.68 views

CVE-2022-25698

CVE-2022-25698 : Concrete issue in Qualcomm Snapdragon Mobile and Snapdragon Wearables, caused by memory corruption in SPI buses due to improper input validation when reading address configuration. Affected components are Qualcomm’s SPI bus handling in those platforms; root cause is input validat...

8.4CVSS7.8AI score0.0005EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/13 12:0 a.m.6 views

CVE-2022-25698

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables...

8.4CVSS7.5AI score0.0005EPSS
Exploits0References1
OSV
OSV
added 2021/07/21 3:15 p.m.0 views

CVE-2021-25698

The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory...

7.8CVSS7.1AI score0.00061EPSS
Exploits0References1
CVE
CVE
added 2021/07/21 12:26 p.m.37 views

CVE-2021-25698

Summary: CVE-2021-25698 affects the OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0. The issue arises because the component was compiled without the no-autoload-config option, enabling a local attacker to escalate privileges by placing a specially crafted DLL in a ...

7.8CVSS7.4AI score0.00061EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2020/11/28 12:0 a.m.21 views

Fedora: Security Advisory for moodle (FEDORA-2020-db73e37548)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6AI score0.00701EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/11/28 12:0 a.m.20 views

Fedora: Security Advisory for moodle (FEDORA-2020-304aa2c365)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6AI score0.00701EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/11/27 12:0 a.m.15 views

Moodle < 3.5.14, 3.7.x < 3.7.9, 3.8.x < 3.8.6, 3.9.x < 3.9.3 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS7.6AI score0.00344EPSS
Exploits0References4
Rows per page
Query Builder