Lucene search
K

119 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:26 a.m.2 views

CVE-2026-2821

A weakness has been identified in Fujian Smart Integrated Management Platform System up to 7.5. Impacted is an unknown function of the file /Module/CRXT/Controller/XCamera.ashx. This manipulation of the argument ChannelName causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS7AI score0.00014EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-2821

Malware in sbrugna...

7.5CVSS7.5AI score0.00406EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 4:2 a.m.5 views

CVE-2010-2821

Unspecified vulnerability on the Cisco Firewall Services Module FWSM with software 3.2 before 3.217.2, 4.0 before 4.011.1, and 4.1 before 4.11.2 for Catalyst 6500 series switches and 7600 series routers, when multi-mode is enabled, allows remote attackers to cause a denial of service device reloa...

7.1CVSS7AI score0.00347EPSS
Exploits0References1
NVD
NVD
added 2025/05/07 3:15 a.m.13 views

CVE-2025-2821

The Search Exclude plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getrestpermission function in all versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to modify plugin settings, excluding...

5.3CVSS0.00348EPSS
Exploits0References3
Circl
Circl
added 2025/05/07 2:21 a.m.21 views

CVE-2025-2821

creationtimestamp| type| source ---|---|--- 2025-05-07 02:21:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15248 2025-05-07 04:26:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokkl454wm2h 2025-05-07 07:12:52+00:00| seen| https://t.me/cvedetector/24670...

5.3CVSS8.7AI score0.00348EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/05/07 1:43 a.m.7 views

CVE-2025-2821 Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modification

The Search Exclude plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the getrestpermission function in all versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to modify plugin settings, excluding...

5.3CVSS5.1AI score0.00348EPSS
Exploits0References3
CVE
CVE
added 2025/05/07 1:43 a.m.67 views

CVE-2025-2821

CVE-2025-2821 affects the WordPress Search Exclude plugin (versions up to and including 2.4.9). The root cause is a missing capability check in the get_rest_permission function, enabling unauthorized modification of plugin settings and exclusion of content from search results by unauthenticated a...

5.3CVSS5.2AI score0.00348EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 2:23 p.m.13 views

CVE-2020-2821

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Budget. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

8.2CVSS7.2AI score0.01495EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/05/13 12:0 a.m.49 views

RHEL 8 : bind and dhcp (RHSA-2024:2821)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2821 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

7.5CVSS7AI score0.43701EPSS
Exploits1References8
CVE
CVE
added 2024/03/22 4:0 p.m.58 views

CVE-2024-2821

CVE-2024-2821 affects DedecMS 5.7 , where the vulnerability lies in the file /src/dede/friendlink_edit.php. Manipulating the id parameter leads to cross-site request forgery (CSRF); the attack can be launched remotely and the exploit has been publicly disclosed. Several sources confirm the condit...

5CVSS4.6AI score0.00046EPSS
Exploits1References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:5 a.m.0 views

SUSE CVE-2016-2821

Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering deletion of DO...

7.5CVSS7.8AI score0.02755EPSS
Exploits0References10
CVE
CVE
added 2022/08/15 10:30 a.m.46 views

CVE-2022-2821

CVE-2022-2821 concerns NamelessMC (namelessmc/nameless) prior to version 2.0.2, where a missing critical step in authentication is the root cause. This weakness can enable an attacker to impersonate or hijack accounts, with a high impact on confidentiality and potential for unauthorized access. P...

9.8CVSS7.8AI score0.00293EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.24 views

Mageia: Security Advisory (MGASA-2016-0220)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.1AI score0.64664EPSS
Exploits7References12
Tenable Nessus
Tenable Nessus
added 2021/11/18 12:0 a.m.33 views

Debian DLA-2821-1 : axis - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2821 advisory. An issue has been found in axis, a SOAP implementation in Java. The issue is related to a cross-site scripting XSS attack in the default servlet/services. For Debian 9...

6.1CVSS7.1AI score0.01707EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2021/07/07 12:0 a.m.63 views

OpenJDK 7 <= 7u221 / 8 <= 8u212 / 11.0.0 <= 11.0.3 / 12.0.0 <= 12.0.1 Multiple Vulnerabilities (2019-07-16)

The version of OpenJDK installed on the remote host is prior to 7 = 7u221 / 8 = 8u212 / 11.0.0 = 11.0.3 / 12.0.0 = 12.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019-07-16 advisory. Please Note: Java CVEs do not always include OpenJDK versions, but are...

5.8CVSS7.2AI score0.00995EPSS
Exploits3References11
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2016:2061-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.64664EPSS
Exploits10References18
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2019:2002-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6.3AI score0.00995EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2012:0076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.8AI score0.029EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2016:1799-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.8AI score0.64664EPSS
Exploits7References14
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2016:1691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.8AI score0.64664EPSS
Exploits7References16
Rows per page
Query Builder