Lucene search
K

155 matches found

OSV
OSV
added 2026/06/05 10:43 a.m.2 views

MINI-977R-2894-7RHJ

Bulletin has no description...

7.5CVSS5.1AI score0.00159EPSS
Exploits0
OSV
OSV
added 2026/05/11 6:46 p.m.3 views

MINI-2894-FQXG-CF2C

Bulletin has no description...

7.5CVSS5.7AI score0.00486EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/02/23 1:20 a.m.10 views

CVE-2026-2894

A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of the file app/frontend/view/login/forget.html. Such manipulation leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might...

9.1CVSS5.4AI score0.004EPSS
Exploits1References1
CVE
CVE
added 2026/02/21 11:2 p.m.13 views

CVE-2026-2894

FunAdmin up to 7.1.0-rc4 is affected by an access-control error in the forget.html getMember function that enables information disclosure. The issue allows remote exploitation with publicly available exploit code. Multiple sources confirm the vulnerability in the same component and version range....

9.1CVSS5.3AI score0.004EPSS
Exploits1References5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/01/28 6:48 a.m.33 views

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2019 - Includes Oracle Oct 2019 CPU minus CVE-2019-2949

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 SR10-FP55 and Version 8 SR6-FP0 used by IBM Tivoli Application Dependency Discovery Manager TADDM. These issues were disclosed as part of the IBM Java SDK updates in Oct2019. Vulnerability Details...

6.8CVSS6.6AI score0.03749EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2026/01/16 5:6 p.m.4 views

EUVD-2026-2894

This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data...

3.3CVSS5.6AI score0.0016EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-2894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to...

6CVSS6.9AI score0.00575EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-2894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u231, 8u221,...

4.3CVSS6.3AI score0.03159EPSS
Exploits0References2
Wolfi
Wolfi
added 2025/08/14 7:47 a.m.9 views

CVE-2019-2894 vulnerabilities

Vulnerabilities for packages: openjdk...

4.3CVSS8.7AI score0.03159EPSS
Exploits0
OSV
OSV
added 2025/08/11 11:18 a.m.2 views

CGA-9R43-W2V6-2894

Bulletin has no description...

7CVSS7.2AI score0.00331EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2014-2894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the cmdsmart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART...

7.2CVSS6.9AI score0.00383EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/11/11 12:0 a.m.9 views

Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2024-2894)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.1AI score0.01939EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/14 12:0 a.m.213 views

SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2894-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2894-1 advisory. The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were...

9.1CVSS7.6AI score0.01219EPSS
Exploits6References970
OSV
OSV
added 2024/03/26 5:15 p.m.2 views

CVE-2024-2894

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. This affects the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

8.8CVSS6.2AI score0.01584EPSS
Exploits1References4
Circl
Circl
added 2024/01/15 8:11 a.m.3 views

CVE-2019-2894

creationtimestamp| type| source ---|---|--- 2024-01-15 08:11:07+00:00| seen| https://t.me/ctinow/168194...

4.3CVSS6.1AI score0.03159EPSS
Exploits0References1
Circl
Circl
added 2023/11/29 6:58 a.m.3 views

CVE-2020-2894

creationtimestamp| type| source ---|---|--- 2023-11-29 06:58:22+00:00| seen| https://t.me/arpsyndicate/688...

6CVSS6.7AI score0.00575EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/10/09 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for gawk (EulerOS-SA-2023-2894)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.9AI score0.00424EPSS
Exploits1References2
NVD
NVD
added 2023/06/09 7:15 a.m.22 views

CVE-2023-2894

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processbulkdeactivateproduct function. This makes it possible for unauthenticated attackers to bulk deactivate...

4.3CVSS4.1AI score0.00241EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/06/09 6:48 a.m.34 views

CVE-2023-2894 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processbulkdeactivateproduct function. This makes it possible for unauthenticated attackers to bulk deactivate...

4.3CVSS4.5AI score0.00241EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/02/21 8:1 p.m.113 views

K67404630: Oracle WebLogic Server vulnerabilities CVE-2018-2894 and CVE-2018-2935

Security Advisory Description CVE-2018-2894 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticat...

9.8CVSS9AI score0.50224EPSS
Exploits7
Rows per page
Query Builder