197 matches found
CVE-2026-2604
A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper validation during contact creation or...
MiracleLinux 7 : java-1.7.0-openjdk-1.7.0.251-2.6.21.0.0.1.el7.AXS7 (AXSA:2020-4487:02)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4487:02 advisory. OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS Security, 8229951 CVE-2020-2601 OpenJDK: Serialization filter changes via jdk.serialFilter...
EUVD-2008-2600
Malware in sbrugna...
CVE-2023-2604
The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘searchterm’ parameter in versions up to, and including, 1.0.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...
CVE-2019-2604
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: Marketing Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...
CVE-2025-2604
creationtimestamp| type| source ---|---|--- 2025-03-21 21:22:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8455 2025-03-22 00:20:15+00:00| seen| https://t.me/cvedetector/20842 2025-03-25 15:23:59+00:00| published-proof-of-concept|...
CVE-2025-2604
CVE-2025-2604 affects SourceCodester Kortex Lite Advocate Office Management System 1.0. The vulnerability is an SQL injection in the edit_act.php file, triggered by manipulating the ID parameter. All connected sources consistently describe remote exploitation possibilities and public disclosure o...
CentOS 6 : java-1.8.0-ibm (RHSA-2020:0469)
The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0469 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE:...
CentOS 6 : java-1.7.1-ibm (RHSA-2020:0467)
The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0467 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE:...
Amazon Linux 2 : openssl (ALAS-2024-2604)
The version of openssl installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2604 advisory. Issue summary: Calling the OpenSSL API function SSLselectnextproto with anempty supported client protocols buffer may cause a cra...
CVE-2024-2604
creationtimestamp| type| source ---|---|--- 2024-03-18 22:26:43+00:00| seen| https://t.me/ctinow/211000 2024-03-18 22:26:46+00:00| seen| https://t.me/ctinow/211003 2024-03-19 05:01:58+00:00| seen| https://t.me/ctinow/211150...
CVE-2024-2604
A vulnerability was found in SourceCodester File Manager App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update-file.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit...
MAL-2024-408 Malicious code in wlwz-2312-2604 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cf7fa5b62edc20d99aea700624d4e3fd221b91c97246555c934692fac30bc25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-2604 Team Circle Image Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting
The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘searchterm’ parameter in versions up to, and including, 1.0.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...
CVE-2023-2604
CVE-2023-2604 affects the WordPress plugin
WordPress Team Circle Image Slider With Lightbox Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)
Software Team Circle Image Slider With Lightbox Type Plugin Vulnerable versions = 1.0.17 Fixed in 1.0.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2604 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 4f6a23b77029 Credi...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM CICS TX on Cloud
Summary IBM CICS TX on Cloud has addressed the following vulnerabilities reported by IBM® Runtime Environment Java™ Version 8.0 Vulnerability Details CVEID:CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker to take control of the system. CVS...
Fedora: Security Advisory for chromium (FEDORA-2022-3f28aa88cf)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
