Lucene search
+L

120 matches found

OSV
OSV
•added 2026/06/24 11:30 a.m.•4 views

CGA-5G5R-2869-8MWM

Bulletin has no description...

5.3CVSS5.8AI score0.00368EPSS
SaveExploits0References5
OSV
OSV
•added 2026/03/10 8:30 p.m.•7 views

MINI-2869-4QVQ-C2PX

Bulletin has no description...

5.9CVSS7AI score0.00333EPSS
SaveExploits0
OSV
OSV
•added 2026/01/31 2:18 p.m.•7 views

MINI-W8V2-2869-7VFW

Bulletin has no description...

7.5CVSS6.5AI score0.02326EPSS
SaveExploits0
OSV
OSV
•added 2026/01/29 12:49 a.m.•13 views

CGA-6WH6-2869-M8XX

Bulletin has no description...

5.3CVSS6AI score0.00629EPSS
SaveExploits0
EUVD
EUVD
•added 2026/01/16 6:11 p.m.•21 views

EUVD-2026-2869

Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in the window title and mislead users about the current site...

7.4CVSS6.2AI score0.00302EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 10:15 a.m.•17 views

CVE-2019-2869

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data...

7CVSS6.4AI score0.00453EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/06/16 12:00 a.m.•9 views

TencentOS Server 3: libtiff (TSSA-2023:0009)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0009 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

6.5CVSS6.6AI score0.01281EPSS
SaveExploits1References5
Rosalinux
Rosalinux
•added 2025/05/26 6:34 a.m.•25 views

Advisory ROSA-SA-2025-2869

Software: libxslt 1.1.28 OS: rosa-server79 packageevrstring: libxslt-1.1.28-6.0.1.1.res7 CVE-ID: CVE-2024-55549 BDU-ID: 2025-03641 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the xsltGetInheritedNsList function of the libxslt library is related to memory usage after it has been freed...

7.8CVSS7.6AI score0.00351EPSS
SaveExploits4
RedhatCVE
RedhatCVE
•added 2025/05/23 1:48 a.m.•17 views

CVE-2023-2869

The WP-Members Membership plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the dofieldreorder function in versions up to, and including, 3.4.7.3. This makes it possible for authenticated attackers with subscriber-level access to reorde...

4.3CVSS6.4AI score0.00503EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:49 a.m.•12 views

CVE-2014-2869

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL server, e-mail address, and IP address information...

5CVSS7.2AI score0.01973EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/19 1:21 a.m.•19 views

WordPress Easy Property Listings plugin <= 3.5.3 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by cyc707 in WordPress Plugin Easy Property Listings versions = 3.5.3...

4.8CVSS6AI score0.00312EPSS
SaveExploits1References1Affected Software1
Circl
Circl
•added 2025/05/15 8:33 p.m.•17 views

CVE-2024-2869

creationtimestamp| type| source ---|---|--- 2025-05-15 20:33:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16564...

4.8CVSS4.8AI score0.00312EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/15 8:15 p.m.•20 views

CVE-2024-2869

The Easy Property Listings WordPress plugin before 3.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00312EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/05/15 8:09 p.m.•14 views

CVE-2024-2869 Easy Property Listings <= 3.5.3 - Admin+ Stored XSS

The Easy Property Listings WordPress plugin before 3.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.7AI score0.00312EPSS
SaveExploits1References1
Circl
Circl
•added 2025/04/04 12:03 p.m.•18 views

CVE-2023-2869

creationtimestamp| type| source ---|---|--- 2025-04-04 12:03:52+00:00| seen| https://bsky.app/profile/thewhynet.bsky.social/post/3llyer2dsli2p...

4.3CVSS6.9AI score0.00503EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/30 11:17 a.m.•20 views

CVE-2025-2869

Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the id parameter in /manageuser.php...

4.8CVSS6.2AI score0.00216EPSS
SaveExploits0References3
Circl
Circl
•added 2025/03/28 11:28 a.m.•31 views

CVE-2025-2869

creationtimestamp| type| source ---|---|--- 2025-03-28 11:28:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9316 2025-03-28 13:33:48+00:00| seen| https://t.me/cvedetector/21393 2025-08-10 18:27:45+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:59+00:00| seen|...

6.1CVSS5.3AI score0.00216EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/28 11:15 a.m.•17 views

CVE-2025-2869

Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the id parameter in /manageuser.php...

6.1CVSS0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/28 10:49 a.m.•10 views

CVE-2025-2869 Reflected Cross-Site Scripting (XSS) vulnerability in Clinic Queuing System

Reflected Cross-Site Scripting XSS vulnerability in version 1.0 of the Clinic Queuing System. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the id parameter in /manageuser.php...

4.8CVSS6.1AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/28 10:49 a.m.•62 views

CVE-2025-2869

CVE-2025-2869 is a reflected XSS vulnerability in Clinic Queuing System version 1.0. The issue arises from the id parameter in /manage_user.php, allowing an attacker to inject JavaScript that executes in a victim’s browser when the URL is viewed. Connected sources corroborate a reflective XSS pat...

6.1CVSS6.1AI score0.00216EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder