Lucene search
K

23 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-28940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary...

9.8CVSS8.6AI score0.04578EPSS
Exploits1References2
Circl
Circl
added 2025/08/13 1:26 p.m.2 views

CVE-2025-28940

creationtimestamp| type| source ---|---|--- 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

4.3CVSS7.3AI score0.00125EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 10:43 p.m.4 views

CVE-2022-28940

In H3C MagicR100 =V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack...

7.5CVSS6.8AI score0.00296EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/03/14 3:41 p.m.2 views

CVE-2025-28940

Cross-Site Request Forgery CSRF vulnerability in arkapravamajumder Back To Top backtotop allows Cross Site Request Forgery.This issue affects Back To Top: from n/a through = 2.0...

4.3CVSS7.2AI score0.00125EPSS
Exploits0References1
NVD
NVD
added 2025/03/11 9:15 p.m.3 views

CVE-2025-28940

Cross-Site Request Forgery CSRF vulnerability in arkapravamajumder Back To Top backtotop allows Cross Site Request Forgery.This issue affects Back To Top: from n/a through = 2.0...

4.3CVSS0.00125EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 9:1 p.m.3 views

CVE-2025-28940 WordPress Back To Top Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in arkapravamajumder Back To Top backtotop allows Cross Site Request Forgery.This issue affects Back To Top: from n/a through = 2.0...

4.3CVSS8.5AI score0.00125EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/11 9:1 p.m.12 views

CVE-2025-28940 WordPress Back To Top Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in arkapravamajumder Back To Top backtotop allows Cross Site Request Forgery.This issue affects Back To Top: from n/a through = 2.0...

4.3CVSS0.00125EPSS
Exploits0References1
CVE
CVE
added 2025/03/11 9:1 p.m.47 views

CVE-2025-28940

CVE-2025-28940 refers to a CSRF vulnerability in the WordPress plugin Back To Top (

4.3CVSS7.2AI score0.00125EPSS
Exploits0References1
Oracle linux
Oracle linux
added 2024/05/07 12:0 a.m.30 views

golang security update

1.21.9-2 - Rebuilt for z-stream - Related: RHEL-24312 - Related: RHEL-28940 1.21.9-1 - Fix CVE-2024-1394 - Fix CVE-2023-45288 - Resolves RHEL-24312 - Resolves RHEL-28940...

7.5CVSS7.4AI score0.75268EPSS
Exploits1
NVD
NVD
added 2024/04/09 5:15 p.m.13 views

CVE-2024-28940

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

8.8CVSS9.1AI score0.02216EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/09 5:1 p.m.28 views

CVE-2024-28940 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

...

8.8CVSS8.9AI score0.02216EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/09 5:1 p.m.23 views

CVE-2024-28940 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

...

8.8CVSS6.8AI score0.02216EPSS
Exploits0References1
CVE
CVE
added 2024/04/09 5:1 p.m.196 views

CVE-2024-28940

Summary (CVE-2024-28940) Affects Microsoft’s OLE DB Driver for SQL Server. The vulnerability is a remote code execution flaw in the OLE DB Driver components, enabling an attacker to run arbitrary code on a vulnerable system over the network, with high impact (C/H/I/A = High). The CVSS v3.1 metric...

8.8CVSS9AI score0.02216EPSS
Exploits0References1Affected Software3
Circl
Circl
added 2022/05/04 8:35 p.m.0 views

CVE-2022-28940

creationtimestamp| type| source ---|---|--- 2022-05-04 20:35:34+00:00| seen| https://t.me/cibsecurity/41943...

7.5CVSS7.3AI score0.00296EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/04 4:15 p.m.2 views

CVE-2022-28940

In H3C MagicR100 =V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack...

7.5CVSS7AI score0.00296EPSS
Exploits1References2
CVE
CVE
added 2022/05/04 3:40 p.m.66 views

CVE-2022-28940

The CVE-2022-28940 entry concerns H3C MagicR100 (

7.5CVSS7.4AI score0.00296EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/04 3:40 p.m.13 views

CVE-2022-28940

In H3C MagicR100 =V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack...

7.7AI score0.00296EPSS
Exploits1References1
NVD
NVD
added 2021/04/02 8:15 p.m.14 views

CVE-2021-28940

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...

9.8CVSS0.04578EPSS
Exploits1References3
OSV
OSV
added 2021/04/02 8:15 p.m.11 views

CVE-2021-28940

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...

9.8CVSS7.6AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2021/04/02 8:15 p.m.39 views

CVE-2021-28940

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...

9.8CVSS7.5AI score0.04578EPSS
Exploits1References3
Rows per page
Query Builder