Lucene search
+L

17 matches found

Tenable Nessus
Tenable Nessus
added 2026/07/09 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-29009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfsreadlinkreply net/nfs- common.c when CONFIGCMDNFS is enabled, allowing a malicious or...

8.8CVSS6.2AI score0.00438EPSS
Exploits0References3
Circl
Circl
added 2026/07/08 5:24 p.m.6 views

CVE-2026-29009

creationtimestamp| type| source ---|---|--- 2026-07-08 17:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5n5jdpza2x 2026-07-09 04:02:39+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq6qsygvcf2s...

8.8CVSS5.9AI score0.00438EPSS
Exploits0References2
OSV
OSV
added 2026/07/08 5:17 p.m.3 views

UBUNTU-CVE-2026-29009

U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfsreadlinkreply net/nfs-common.c when CONFIGCMDNFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte nfspathbuff buffer by returning multiple relative symlink targets that are appended witho...

8.8CVSS6.2AI score0.00438EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/11/04 12:4 p.m.339 views

Exploit for CVE-2025-29009

CVE-2025-29009-POC Medical Prescr...

10CVSS7.1AI score0.00544EPSS
Exploits3
Circl
Circl
added 2025/11/04 11:4 a.m.8 views

CVE-2025-29009

creationtimestamp| type| source ---|---|--- 2025-11-04 11:04:54+00:00| seen| https://sploitus.com/exploit?id=916CC362-4D92-508B-B1C4-1477570284D4 2025-11-04 15:00:15+00:00| published-proof-of-concept| Telegram/lU3-VleZ8xnGRhD2LVytPBlCefJ7xJ3S6Ezuc1kg2yKkWNE 2025-11-04 21:00:05+00:00|...

10CVSS5.7AI score0.00544EPSS
Exploits3References2
Vulnrichment
Vulnrichment
added 2025/07/16 11:28 a.m.6 views

CVE-2025-29009 WordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescription Attachment Plugin for WooCommerce allows Upload a Web Shell to a Web Server. This issue affects Medical Prescription Attachment Plugin for WooCommerce: from n/a through 1.2.3...

10CVSS6.4AI score0.00544EPSS
Exploits3References1
Cvelist
Cvelist
added 2025/07/16 11:28 a.m.19 views

CVE-2025-29009 WordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescription Attachment Plugin for WooCommerce medical-prescription-attachment-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Medical Prescription Attachment Plugin for WooCommerce...

10CVSS0.00544EPSS
Exploits3References1
Patchstack
Patchstack
added 2025/07/11 7:33 a.m.12 views

WordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Medical Prescription Attachment Plugin for WooCommerce versions = 1.2.3...

10CVSS6.6AI score0.00544EPSS
Exploits3Affected Software1
Cvelist
Cvelist
added 2024/03/25 4:14 a.m.26 views

CVE-2024-29009

Cross-site request forgery CSRF vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker to hijack the authentication of the administrator and to perform unintended operations if the administrator views a malicious page while logged in...

7.3AI score0.00231EPSS
Exploits0References2
CVE
CVE
added 2024/03/25 4:14 a.m.65 views

CVE-2024-29009

CVE-2024-29009 affects the WordPress plugin easy-popup-show (all versions) and is a CSRF vulnerability. The issue enables a remote unauthenticated attacker to hijack an administrator’s session by enticing the admin to view a malicious page, potentially allowing unintended operations. Multiple con...

6.1CVSS7.3AI score0.00231EPSS
Exploits0References2
Circl
Circl
added 2023/10/28 12:17 a.m.11 views

CVE-2023-29009

creationtimestamp| type| source ---|---|--- 2023-10-28 00:17:36+00:00| seen| https://t.me/cibsecurity/73096...

6.1CVSS5.7AI score0.0047EPSS
Exploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/10/27 12:0 a.m.46 views

JVN#45547161: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2023-29009 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...

9.8CVSS6.8AI score0.0097EPSS
Exploits0
Circl
Circl
added 2022/05/11 6:35 p.m.6 views

CVE-2022-29009

creationtimestamp| type| source ---|---|--- 2022-05-11 18:35:37+00:00| seen| https://t.me/cibsecurity/42361...

9.8CVSS8.7AI score0.22593EPSS
Exploits1References1
CVE
CVE
added 2022/05/11 1:8 p.m.113 views

CVE-2022-29009

CVE-2022-29009 applies to Cyber Cafe Management System Project v1.0 (CCMS). The NVD/Nuclei and related CVE records describe multiple SQL injection vulnerabilities in the Admin panel, exploitable via the username and password parameters, which can allow an attacker to bypass authentication and pot...

9.8CVSS10AI score0.22593EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2021/03/25 8:15 p.m.18 views

CVE-2021-29009

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter...

4.8CVSS5.9AI score
Exploits0References1
CVE
CVE
added 2021/03/25 7:21 p.m.186 views

CVE-2021-29009

SEO Panel 4.8.0 is affected by a cross-site scripting (XSS) vulnerability. The issue arises in archive.php via the type parameter, allowing remote attackers to inject JavaScript. Documented impact includes partial integrity and low confidentiality impact with network attack vector and user intera...

4.8CVSS4.9AI score0.00828EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2019/08/22 12:0 a.m.5 views

cPanel Input Validation Error Vulnerability (CNVD-2019-29009)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a network...

8.8CVSS6.8AI score0.0132EPSS
Exploits0References1
Rows per page
Query Builder