Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:23 p.m.4 views

CVE-2020-26566

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

7.5CVSS6.8AI score0.12015EPSS
Exploits1
NVD
NVD
added 2025/03/26 3:16 p.m.6 views

CVE-2025-26566

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank In Stock Mailer for WooCommerce in-stock-mailer-for-woocommerce allows Reflected XSS.This issue affects In Stock Mailer for WooCommerce: from n/a through = 2.1.1...

7.1CVSS0.00115EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/26 2:24 p.m.13 views

CVE-2025-26566 WordPress In Stock Mailer for WooCommerce Plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Frank In Stock Mailer for WooCommerce in-stock-mailer-for-woocommerce allows Reflected XSS.This issue affects In Stock Mailer for WooCommerce: from n/a through = 2.1.1...

7.1CVSS0.00115EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 9:47 a.m.12 views

CVE-2023-26566

Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface ARI, which allows remote attackers to reconfigure Asterisk and make external and internal calls via HTTP and WebSocket requests sent to the API...

8.6CVSS7.1AI score0.00391EPSS
Exploits0References1
NVD
NVD
added 2024/05/14 12:39 p.m.9 views

CVE-2023-26566

Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface ARI, which allows remote attackers to reconfigure Asterisk and make external and internal calls via HTTP and WebSocket requests sent to the API...

8.6CVSS6.8AI score0.00391EPSS
Exploits0References1
Circl
Circl
added 2024/03/07 2:27 a.m.1 views

CVE-2024-26566

creationtimestamp| type| source ---|---|--- 2024-03-07 02:27:04+00:00| seen| https://t.me/ctinow/202002...

8.2CVSS4.8AI score0.00262EPSS
Exploits0References1
CVE
CVE
added 2024/03/07 12:0 a.m.65 views

CVE-2024-26566

CVE-2024-26566 affects Cute Http File Server v3.1. The issue allows a remote attacker to escalate privileges via the password verification component, with a network attack vector, no user interaction, and high impact (Integrity). Affected software is Cute Http File Server v3.1 (no other versions ...

8.2CVSS7.2AI score0.00262EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/07 12:0 a.m.14 views

CVE-2024-26566

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component...

7.2AI score0.00262EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2022/11/16 12:0 a.m.25 views

Synology DiskStation Manager (DSM) 6.2.x < 6.2.3-25426-3 Multiple Vulnerabilities (Synology-SA-20:26) - Unreliable Remote Version Check

Synology DiskStation Manager DSM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS7.9AI score0.05341EPSS
Exploits6References1
OpenVAS
OpenVAS
added 2022/11/16 12:0 a.m.24 views

Synology DiskStation Manager (DSM) 6.2.x < 6.2.3-25426-3 Multiple Vulnerabilities (Synology-SA-20:26) - Remote Known Vulnerable Versions Check

Synology DiskStation Manager DSM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS7.9AI score0.05341EPSS
Exploits6References1
Circl
Circl
added 2021/02/27 12:39 a.m.1 views

CVE-2021-26566

creationtimestamp| type| source ---|---|--- 2021-02-27 00:39:54+00:00| seen| https://t.me/cibsecurity/24269...

9CVSS8.1AI score0.00535EPSS
Exploits1References1
NVD
NVD
added 2021/02/26 10:15 p.m.12 views

CVE-2021-26566

Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic...

9CVSS0.00535EPSS
Exploits1References2
CVE
CVE
added 2021/02/26 9:45 p.m.99 views

CVE-2021-26566

CVE-2021-26566 affects Synology DiskStation Manager (DSM) via the synorelayd component, where a vulnerability prior to DSM 6.2.3-25426-3 allows a remote attacker to induce insertion of sensitive information into outbound data through inbound QuickConnect traffic, enabling a man‑in‑the‑middle to e...

9CVSS9.2AI score0.00535EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/10/29 12:0 a.m.20 views

FreeBSD : motion -- Denial of Service (94ffc0d9-1915-11eb-b809-b42e991fc52e)

cxsecurity.com reports : A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request C Tenable Network Security, Inc. The descriptive text and package checks ...

7.5CVSS7.3AI score0.12015EPSS
Exploits1References2
Circl
Circl
added 2020/10/26 9:29 p.m.0 views

CVE-2020-26566

creationtimestamp| type| source ---|---|--- 2020-10-26 21:29:10+00:00| seen| https://t.me/cibsecurity/15588...

7.5CVSS7.3AI score0.12015EPSS
Exploits1References1
OSV
OSV
added 2020/10/26 6:15 p.m.6 views

CVE-2020-26566

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

7.5CVSS6.7AI score
Exploits0References4
UbuntuCve
UbuntuCve
added 2020/10/26 6:15 p.m.17 views

CVE-2020-26566

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

7.5CVSS7.1AI score0.12015EPSS
Exploits1References6
CVE
CVE
added 2020/10/26 5:44 p.m.60 views

CVE-2020-26566

The vulnerability CVE-2020-26566 affects Motion-Project Motion versions 3.2 through 4.3.1. The issue is triggered by a crafted HTTP request that leads to a Denial of Service, manifesting as a segmentation fault and killing the main process. Gentoo GLSA notes the root cause as a parsing flaw in th...

7.5CVSS7.2AI score0.12015EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2020/10/26 5:44 p.m.18 views

CVE-2020-26566

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

7.5CVSS7.3AI score0.12015EPSS
Exploits1
Vulnrichment
Vulnrichment
added 1976/01/01 12:0 a.m.10 views

CVE-2023-26566

Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface ARI, which allows remote attackers to reconfigure Asterisk and make external and internal calls via HTTP and WebSocket requests sent to the API...

7.1AI score0.00391EPSS
Exploits0References1
Rows per page
Query Builder