Lucene search
+L

136 matches found

Circl
Circl
added 2026/06/25 3:56 p.m.8 views

CVE-2026-2815

creationtimestamp| type| source ---|---|--- 2026-06-25 15:56:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4s6q6fxv2s...

8.4CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2025/08/08 1:17 p.m.13 views

CVE-2018-2815 vulnerabilities

Vulnerabilities for packages: corretto, openjdk-17-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-11-openj9...

5.3CVSS6.3AI score0.04816EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 4:1 a.m.12 views

CVE-2010-2815

Unspecified vulnerability in the Transport Layer Security TLS implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.15, 8.1 before 8.12.44, 8.2 before 8.22.17, and 8.3 before 8.31.6 and Cisco PIX Security Appliances 500 series...

7.8CVSS6.9AI score0.02496EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/30 11:15 a.m.12 views

CVE-2025-2815

The Administrator Z plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the adminzimportbackup function in all versions up to, and including, 2025.03.24. This makes it possible for authenticated...

8.8CVSS7.3AI score0.00334EPSS
SaveExploits0References1
Circl
Circl
added 2025/03/28 11:28 a.m.7 views

CVE-2025-2815

creationtimestamp| type| source ---|---|--- 2025-03-28 11:28:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9314...

8.8CVSS8.7AI score0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/28 11:13 a.m.5 views

CVE-2025-2815 Administrator Z <= 2025.03.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

The Administrator Z plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the adminzimportbackup function in all versions up to, and including, 2025.03.24. This makes it possible for authenticated...

8.8CVSS7.4AI score0.00334EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/28 11:13 a.m.19 views

CVE-2025-2815 Administrator Z <= 2025.03.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

The Administrator Z plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the adminzimportbackup function in all versions up to, and including, 2025.03.24. This makes it possible for authenticated...

8.8CVSS0.00334EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/28 11:13 a.m.56 views

CVE-2025-2815

The CVE-2025-2815 entry concerns the Administrator Z plugin for WordPress. A missing capability check in adminz_import_backup() allows authenticated users with Subscriber+ access to modify arbitrary options, enabling privilege escalation (e.g., setting the default registration role to administrat...

8.8CVSS7.3AI score0.00334EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/22 8:15 a.m.14 views

CVE-2024-2815

A vulnerability classified as critical has been found in Tenda AC15 15.03.20multi. Affected is the function R7WebsSecurityHandler of the file /goform/execCommand of the component Cookie Handler. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to laun...

9.8CVSS9.3AI score0.01315EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/22 7:31 a.m.89 views

CVE-2024-2815

CVE-2024-2815 affects Tenda AC15, specifically the R7WebsSecurityHandler in /goform/execCommand. The vulnerability stems from a stack-based buffer overflow caused by manipulating the password argument, enabling remote exploitation. Public exploit information is indicated in the entry. Connected s...

9.8CVSS9AI score0.01315EPSS
SaveExploits1References3Affected Software1
Circl
Circl
added 2023/11/15 4:53 p.m.3 views

CVE-2019-2815

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| seen| https://t.me/BABATATASASA/5989...

4.9CVSS6.2AI score0.02008EPSS
SaveExploits0References1
Circl
Circl
added 2023/05/19 8:33 p.m.7 views

CVE-2023-2815

creationtimestamp| type| source ---|---|--- 2023-05-19 20:33:30+00:00| seen| https://t.me/cibsecurity/64466...

9.8CVSS6.9AI score0.00726EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/05/19 4:31 p.m.37 views

CVE-2023-2815 SourceCodester Online Jewelry Store POST Parameter supplier.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...

6.5CVSS10AI score0.00726EPSS
SaveExploits1References3
CVE
CVE
added 2023/05/19 4:31 p.m.68 views

CVE-2023-2815

The CVE-2023-2815 entry affects SourceCodester Online Jewelry Store 1.0. The vulnerability is in the file supplier.php of the POST Parameter Handler, where manipulating the suppid argument leads to SQL injection. It is exploitable remotely and exploits are publicly disclosed. Multiple sources con...

9.8CVSS8.4AI score0.00726EPSS
SaveExploits1References3Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 8:2 p.m.60 views

K15217245: Oracle Java SE vulnerability CVE-2018-2815

Security Advisory Description Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability...

5.3CVSS4.2AI score0.04816EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/01/14 12:0 a.m.40 views

CVE-2022-2815 Insecure Storage of Sensitive Information in publify/publify

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10...

4.6CVSS6.7AI score0.00562EPSS
SaveExploits1References2
CVE
CVE
added 2023/01/14 12:0 a.m.74 views

CVE-2022-2815

CVE-2022-2815 affects Publify/publify versions prior to 9.2.10 due to insecure storage of sensitive information in the GitHub repository. The provided sources describe the root cause as insecure storage, implying potential disclosure of sensitive data. Remediation: upgrade to version 9.2.10 or la...

6.5CVSS5.4AI score0.00562EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2018-0218)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7AI score0.15141EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/10/08 12:0 a.m.6 views

The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli ATS2815 and ATS2819 arises due to insufficient verification of input data. This allows a perpetrator to trigger a service failure.

The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli ATS2815 and ATS2819 exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through the created LMP...

6.5CVSS6.6AI score0.00443EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2018:1938-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS6.6AI score0.15141EPSS
SaveExploits0References2
Rows per page
Query Builder