Lucene search
K

21 matches found

OSV
OSV
added 11 hours ago2 views

ROOT-OS-UBUNTU-2204-CVE-2024-26842 CVE-2024-26842 in rootio-linux - Patched by Root

Root has patched CVE-2024-26842 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

7.8CVSS6.9AI score0.00236EPSS
Exploits0
OSV
OSV
added 14 hours ago3 views

ROOT-OS-DEBIAN-12-CVE-2024-26842 CVE-2024-26842 in rootio-linux - Patched by Root

Root has patched CVE-2024-26842 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

7.8CVSS6.7AI score0.00236EPSS
Exploits0
OSV
OSV
added 14 hours ago5 views

ROOT-OS-DEBIAN-11-CVE-2024-26842 CVE-2024-26842 in rootio-linux - Patched by Root

Root has patched CVE-2024-26842 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

7.8CVSS7.2AI score0.00236EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 2:13 a.m.10 views

CVE-2023-26842

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php...

5.4CVSS5.6AI score0.01409EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/10 12:20 a.m.15 views

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

7.5CVSS6.7AI score0.00296EPSS
Exploits0References1
Circl
Circl
added 2025/05/08 4:48 p.m.16 views

CVE-2025-26842

creationtimestamp| type| source ---|---|--- 2025-05-08 16:48:45+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodjbrfyh22 2025-05-08 20:07:42+00:00| seen| https://t.me/cvedetector/24836...

7.5CVSS4.8AI score0.00296EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2025/05/08 4:15 p.m.5 views

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

7.5CVSS5.9AI score0.00296EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/08 12:0 a.m.8 views

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

7.4AI score0.00296EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/05/08 12:0 a.m.6 views

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

7.5CVSS5.3AI score0.00296EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-26842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with...

7.5CVSS5.5AI score0.00296EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-26842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: Fix shift issue in ufshcdclearcmd When tasktag = 32 in MCQ mode and sizeofunsigned int == 4, 1U Workqueue: ufsehwq0 ufshcderrhandler Call trace...

7.8CVSS5.8AI score0.00236EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2024/04/17 5:30 p.m.40 views

CVE-2024-26842

A flaw was found in the Linux kernel's driver for Universal Flash Storage host controllers. This issue can lead to a denial of service...

4.4CVSS8.9AI score0.00236EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2023/05/31 2:15 p.m.1 views

CVE-2023-26842

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php...

5.4CVSS6.3AI score0.01409EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/05/31 12:0 a.m.18 views

CVE-2023-26842

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php...

5.5AI score0.01409EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/05/31 12:0 a.m.9 views

CVE-2023-26842

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php...

5.9AI score0.01409EPSS
Exploits1References1
CVE
CVE
added 2023/05/31 12:0 a.m.61 views

CVE-2023-26842

CVE-2023-26842 is a stored XSS vulnerability affecting ChurchCRM 4.5.3 . Exploitation occurs via the OptionManager.php path, allowing an attacker to inject arbitrary web script/HTML. Root cause is an XSS in input handling (CWE-79), with CVSS v3.1 metrics indicating network access, low attack comp...

5.4CVSS5.3AI score0.01409EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2022/10/13 6:15 p.m.8 views

CVE-2020-26842

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

Exploits0
Vulnrichment
Vulnrichment
added 2022/08/22 6:22 p.m.5 views

CVE-2022-26842

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

9.6CVSS8.8AI score0.0293EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/08/22 6:22 p.m.19 views

CVE-2022-26842

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

9.6CVSS8.9AI score0.0293EPSS
Exploits1References2
CVE
CVE
added 2022/08/22 6:22 p.m.87 views

CVE-2022-26842

WWBN AVideo is affected by a reflected XSS (CVE-2022-26842) in the charts tab selection feature. The vulnerability stems from unsanitized use of the jump GET parameter in view/charts.php, enabling arbitrary Javascript execution when an authenticated user clicks or loads a crafted link. Affected v...

9.6CVSS8.6AI score0.0293EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder