Lucene search
K

23 matches found

NVD
NVD
•added 2026/04/24 3:16 p.m.•0 views

CVE-2026-31556

In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchkquotaitem can return early after calling xchkfblockprocesserror. When that helper returns false, the function returned immediately without dropping dq-qqlock, which...

5.5CVSS0.00015EPSS
Exploits0References4
OSV
OSV
•added 2026/04/24 3:16 p.m.•1 views

UBUNTU-CVE-2026-31556

In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchkquotaitem can return early after calling xchkfblockprocesserror. When that helper returns false, the function returned immediately without dropping dq-qqlock, which...

5.5CVSS5.2AI score0.00015EPSS
Exploits0References7
RedhatCVE
RedhatCVE
•added 2026/01/09 10:46 a.m.•4 views

CVE-2022-31556

The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS7AI score0.00432EPSS
Exploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/02 1:48 p.m.•13 views

CVE-2025-31556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.3...

6.5CVSS7.2AI score0.00174EPSS
Exploits0References1
NVD
NVD
•added 2025/03/31 1:15 p.m.•4 views

CVE-2025-31556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.3...

6.5CVSS0.00174EPSS
Exploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/31 12:55 p.m.•5 views

CVE-2025-31556 WordPress IMPress for IDX Broker plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker allows Stored XSS. This issue affects IMPress for IDX Broker: from n/a through 3.2.3...

6.5CVSS6.8AI score0.00174EPSS
Exploits0References1
Cvelist
Cvelist
•added 2025/03/31 12:55 p.m.•15 views

CVE-2025-31556 WordPress IMPress for IDX Broker plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.3...

6.5CVSS0.00174EPSS
Exploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/14 2:36 a.m.•15 views

CVE-2024-31556

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function...

7.8CVSS7.1AI score0.00083EPSS
Exploits0References1
NVD
NVD
•added 2024/05/14 9:15 p.m.•10 views

CVE-2024-31556

An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function...

7.8CVSS6.9AI score0.00083EPSS
Exploits0References1
CVE
CVE
•added 2024/05/14 8:15 p.m.•84 views

CVE-2024-31556

CVE-2024-31556 affects Reportico Web prior to version 8.1.0. The issue allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function, indicating a local-privilege or local-code execution risk. The vulnerability is described in multiple sources as af...

7.8CVSS7.1AI score0.00083EPSS
Exploits0References1
Circl
Circl
•added 2023/05/10 8:19 p.m.•1 views

CVE-2023-31556

creationtimestamp| type| source ---|---|--- 2023-05-10 20:19:47+00:00| seen| https://t.me/cibsecurity/63812...

8.8CVSS6.3AI score0.00315EPSS
Exploits1References1
NVD
NVD
•added 2023/05/10 4:15 p.m.•10 views

CVE-2023-31556

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...

8.8CVSS6.4AI score0.00315EPSS
Exploits1References1
OSV
OSV
•added 2023/05/10 4:15 p.m.•2 views

UBUNTU-CVE-2023-31556

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...

6.5CVSS5.8AI score0.00315EPSS
Exploits1References3
CVE
CVE
•added 2023/05/10 12:0 a.m.•46 views

CVE-2023-31556

CVE-2023-31556 affects the PoDoFo library: PoDoFo 0.10.0 contains a segmentation violation in PdfDictionary::findKeyParent, enabling a stack-based overflow against vulnerable builds. Public advisories (Snyk) confirm the issue and recommend upgrading Podof o to 0.10.4 or higher; other sources reit...

8.8CVSS6.3AI score0.00315EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/10 12:0 a.m.•10 views

CVE-2023-31556

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...

6.4AI score0.00315EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
•added 2022/07/11 1:15 a.m.•0 views

CVE-2022-31556

The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.00432EPSS
Exploits1References2
OSV
OSV
•added 2022/07/11 1:15 a.m.•1 views

CVE-2022-31556

The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.00432EPSS
Exploits1References1
CVE
CVE
•added 2022/07/11 12:59 a.m.•67 views

CVE-2022-31556

The CVE-2022-31556 entry concerns the rusyasoft/TrainEnergyServer repository (up to 2017-08-03). Affected component: Flask’s send_file usage, which is described as unsafe. Root cause: improper handling in send_file leads to absolute path traversal. Impact stated across sources: potential exposure...

9.3CVSS9.3AI score0.00432EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
•added 2021/10/21 12:0 a.m.•21 views

Fedora: Security Advisory for mediawiki (FEDORA-2021-eee8b7514f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS6.5AI score0.01215EPSS
Exploits2References2
OpenVAS
OpenVAS
•added 2021/10/21 12:0 a.m.•23 views

Fedora: Security Advisory for mediawiki (FEDORA-2021-56d8173b5e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS6.5AI score0.01215EPSS
Exploits2References2
Rows per page
Query Builder