Lucene search
K

73 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/21 12:0 a.m.5 views

Amazon Linux 2 : net-snmp, --advisory ALAS2-2026-3124 (ALAS-2026-3124)

The version of net-snmp installed on the remote host is prior to 5.7.2-49. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3124 advisory. net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an...

9.8CVSS5.9AI score0.00594EPSS
Exploits2References4
Amazon
Amazon
added 2026/01/21 12:0 a.m.5 views

Important: net-snmp

Issue Overview: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2...

9.8CVSS5.9AI score0.00594EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.2 views

MiracleLinux 7 : rh-mariadb105-mariadb (AXSA:2022-3124:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3124:01 advisory. mysql: Server: DML unspecified vulnerability CPU Apr 2021 CVE-2021-2154 mysql: Server: DML unspecified vulnerability CPU Apr 2021 CVE-2021-2166 mysq...

7.1CVSS6.7AI score0.01154EPSS
Exploits4References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-3124

Malware in sbrugna...

6.1CVSS6.3AI score0.0024EPSS
Exploits1References2
Circl
Circl
added 2025/09/16 6:39 a.m.2 views

CVE-2022-3124

creationtimestamp| type| source ---|---|--- 2025-09-16 06:39:33+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-3124.yaml 2025-09-17 21:02:38+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qayzps32m...

5.3CVSS4.9AI score0.08664EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-3124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack ...

5.3CVSS6.2AI score0.08664EPSS
Exploits2References2
Circl
Circl
added 2025/08/31 3:13 a.m.1 views

CVE-2013-3124

creationtimestamp| type| source ---|---|--- 2025-08-31 03:13:07+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

9.3CVSS5.9AI score0.31113EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-3124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors. CVE-2016-3124 Note...

5.3CVSS5.8AI score0.00203EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 3:48 a.m.3 views

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

7.2CVSS6.8AI score0.00048EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 6:29 p.m.5 views

CVE-2009-3124

Directory traversal vulnerability in getmessage.cgi in QuarkMail allows remote attackers to read arbitrary files via a .. dot dot in the tf parameter...

5CVSS7AI score0.01577EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 11:15 p.m.17 views

CVE-2025-3124

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn't otherwise have access to in the Security Overview in GitHub Advanced Security. The Security Overview was required to be filtered only...

5.3CVSS0.0023EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/04/17 10:50 p.m.14 views

CVE-2025-3124 Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn't otherwise have access to in the Security Overview in GitHub Advanced Security. The Security Overview was required to be filtered only...

5.3CVSS0.0023EPSS
Exploits0References4
CVE
CVE
added 2025/04/17 10:50 p.m.64 views

CVE-2025-3124

CVE-2025-3124 concerns a missing authorization vulnerability in GitHub Enterprise Server that allowed a user to see the names of private repositories they otherwise wouldn’t access via the Security Overview in GitHub Advanced Security. The issue affected all versions prior to 3.17 and was fixed i...

5.3CVSS6.2AI score0.0023EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2024/04/01 12:31 p.m.43 views

CVE-2024-3124

CVE-2024-3124 affects fridgecow smartalarm 1.8.1 on Android. The vulnerability targets the Backup File Handler component (unknown part of androidmanifest.xml) and leads to exposure of backup files to an unauthorized control sphere. An attack can be launched on the physical device; the exploit has...

2.4CVSS3.6AI score0.0003EPSS
Exploits0References4
Circl
Circl
added 2023/09/05 12:41 p.m.0 views

CVE-2023-3124

creationtimestamp| type| source ---|---|--- 2023-09-05 12:41:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5088 2024-09-26 11:20:28+00:00| seen| Telegram/sruvLt1HCpQH2DeXdTaAiepbEJlcTFR85rQ5a4S9CfzBwnM 2024-09-26 11:20:28+00:00| seen|...

8.8CVSS8.1AI score0.26009EPSS
Exploits2References1
NVD
NVD
added 2023/06/07 2:15 a.m.15 views

CVE-2023-3124

The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updatepageoption function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update...

8.8CVSS8.4AI score0.26009EPSS
Exploits2References2
OSV
OSV
added 2023/06/07 2:15 a.m.0 views

CVE-2023-3124

The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updatepageoption function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update...

8.8CVSS5.7AI score
Exploits0References2
CVE
CVE
added 2023/06/07 1:51 a.m.213 views

CVE-2023-3124

The CVE-2023-3124 entry concerns the WordPress Elementor Pro plugin. A missing capability check in the update_page_option function (versions up to and including 3.11.6) allows authenticated users with subscriber-level capabilities to modify arbitrary site options, enabling privilege escalation. A...

8.8CVSS8.3AI score0.26009EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2023/06/07 1:51 a.m.18 views

CVE-2023-3124 Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updatepageoption function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update...

8.8CVSS8.6AI score0.26009EPSS
Exploits2References2
Cvelist
Cvelist
added 2022/10/03 1:45 p.m.11 views

CVE-2022-3124 Frontend File Manager < 21.3 - Unauthenticated File Renaming

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server...

5.7AI score0.08664EPSS
Exploits2References1
Rows per page
Query Builder