Lucene search
K

124 matches found

OSV
OSV
added 2026/04/12 2:19 a.m.0 views

MINI-JQGR-2974-QC7M

Bulletin has no description...

7.5CVSS5.7AI score0.00019EPSS
Exploits0
EUVD
EUVD
added 2026/01/16 6:30 a.m.1 views

EUVD-2026-2974

Not used...

6.4AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:33 p.m.3 views

CVE-2010-2974

Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server WAS before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment IDE and the InFusion...

9.3CVSS8.5AI score0.11282EPSS
Exploits0References1
NVD
NVD
added 2025/03/31 4:15 a.m.9 views

CVE-2025-2974

A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely...

5.4CVSS0.00339EPSS
Exploits1References4
CVE
CVE
added 2025/03/31 3:31 a.m.60 views

CVE-2025-2974

CVE-2025-2974 affects CodeCanyon Perfex CRM (up to version 3.2.1). The vulnerability lies in the Contracts module, specifically the /contract code, where manipulation of input content enables cross-site scripting (XSS). Exploitation can be remote, and multiple sources note public disclosure of th...

5.4CVSS6.6AI score0.00339EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/03/31 3:31 a.m.16 views

CVE-2025-2974 CodeCanyon Perfex CRM Contracts contract cross site scripting

A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely...

5.1CVSS0.00339EPSS
Exploits1References4
OSV
OSV
added 2024/06/21 8:4 a.m.19 views

CGA-2974-F63R-WQFR

Bulletin has no description...

8.8CVSS8.6AI score0.00658EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/06/14 12:0 a.m.29 views

Rocky Linux 8 : libXpm (RLSA-2024:2974)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2974 advisory. libXpm: out of bounds read in XpmCreateXpmImageFromBuffer CVE-2023-43788 libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43789 Tenabl...

5.5CVSS6.4AI score0.00033EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2024/05/28 12:0 a.m.44 views

Oracle Linux 8 : libXpm (ELSA-2024-2974)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2974 advisory. - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage - CVE-2023-43787 libX11: integer overflow in XCreateImage leading to a...

7.8CVSS6.5AI score0.00084EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2024/05/22 12:0 a.m.23 views

CentOS 8 : libXpm (CESA-2024:2974)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2024:2974 advisory. - A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacker to...

5.5CVSS6.3AI score0.00033EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/05/08 12:0 a.m.42 views

GLSA-202405-25 : MariaDB: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-25 MariaDB: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in MariaDB. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

7.8CVSS6.7AI score0.00789EPSS
Exploits40References61
Vulnrichment
Vulnrichment
added 2024/04/09 6:59 p.m.16 views

CVE-2024-2974 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.9.13 via the loadmore function. This can allow unauthenticated attackers to extract sensitiv...

5.3CVSS7.2AI score0.00392EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/09 6:59 p.m.16 views

CVE-2024-2974 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.9.13 via the loadmore function. This can allow unauthenticated attackers to extract sensitiv...

5.3CVSS5.5AI score0.00392EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/04/01 12:0 a.m.15 views

WordPress Essential Addons for Elementor Plugin <= 5.9.13 is vulnerable to Sensitive Data Exposure

Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.9.13 Fixed in 5.9.14 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2974 Patch priority Low CVSS severity Low 5.3 Developer WPDeveloper PSID 724b318703c8 Credits Ankit Patel...

5.3CVSS6.5AI score0.00392EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2023/11/15 4:53 p.m.0 views

CVE-2019-2974

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| seen| https://t.me/BABATATASASA/5989 2024-01-15 08:41:13+00:00| seen| https://t.me/ctinow/168213...

6.5CVSS6.4AI score0.00208EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.24 views

Rocky Linux 8 : mariadb:10.3 (RLSA-2020:5500)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:5500 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.27 and prior and 8.0.17 and...

9CVSS6.3AI score0.04602EPSS
Exploits0References37
vulnersOsv
vulnersOsv
added 2023/07/04 3:30 p.m.1 views

ai.timefold.solver:timefold-solver-quarkus (>=0.8.38 <=0.8.42), ai.timefold.solver:timefold-solver-quarkus-benchmark (>=0.8.38 <=0.8.42) +3888 more potentially affected by CVE-2023-2974 via io.quarkus:quarkus-core (>=0.11.0 <=2.16.7.Final)

io.quarkus:quarkus-core MAVEN version =0.11.0, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.42 and more Source cve...

8.1CVSS6.9AI score0.00489EPSS
Exploits0
OSV
OSV
added 2023/07/04 2:15 p.m.2 views

CVE-2023-2974

A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol...

8.1CVSS5.7AI score0.00489EPSS
Exploits0References3
CVE
CVE
added 2023/07/04 1:24 p.m.93 views

CVE-2023-2974

CVE-2023-2974 affects quarkus-core. The vulnerability arises because the TLS protocol configured via quarkus.http.ssl.protocols is not enforced, allowing a client to force the use of a weaker supported TLS protocol. Documented impact includes potential compromise of confidentiality and integrity,...

8.1CVSS7.1AI score0.00489EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2023/06/29 4:46 a.m.36 views

CVE-2023-2974

A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol...

6.5CVSS6.9AI score0.00489EPSS
Exploits0References3
Rows per page
Query Builder