Lucene search
K

213 matches found

Circl
Circl
added 2026/02/25 8:41 a.m.4 views

CVE-2026-3167

creationtimestamp| type| source ---|---|--- 2026-02-25 08:41:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfobvjvvuj2u 2026-02-25 09:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfodmcvj4f2x 2026-02-25 19:40:09+00:00| seen|...

9CVSS8.2AI score0.00632EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2026/02/19 12:0 a.m.7 views

Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3167 (ALAS-2026-3167)

The version of thunderbird installed on the remote host is prior to 140.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3167 advisory. Spoofing issue in the Downloads Panel component. This vulnerability affects Firefox 146. CVE-2025-14327 CSS-based...

9.8CVSS9.3AI score0.0055EPSS
Exploits0References30
EUVD
EUVD
added 2026/01/17 12:30 a.m.3 views

EUVD-2026-3167

EUVD-2026-3167...

6.4AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 7 : postgresql-9.2.13-1.el7 (AXSA:2015-224:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-224:01 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll nee...

9.8CVSS8AI score0.08496EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.7 views

MiracleLinux 4 : httpd-2.2.15-60.5.0.1.AXS4 (AXSA:2017-1918:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1918:04 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. CVE-2017-3167 In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.2...

9.8CVSS7.3AI score0.5677EPSS
Exploits3References5
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.8 views

MiracleLinux 7 : httpd-2.4.6-67.2.0.1.el7.AXS7 (AXSA:2017-2042:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2042:02 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. CVE-2017-3167 In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.2...

9.8CVSS7.3AI score0.57472EPSS
Exploits4References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2011-3167

Malware in sbrugna...

9.8CVSS9.2AI score0.02402EPSS
Exploits1References2
Circl
Circl
added 2025/04/03 9:55 p.m.3 views

CVE-2025-3167

creationtimestamp| type| source ---|---|--- 2025-04-03 21:55:45+00:00| seen| https://t.me/cvedetector/22010...

7.5CVSS6.2AI score0.00729EPSS
Exploits1References1
NVD
NVD
added 2025/04/03 5:15 p.m.12 views

CVE-2025-3167

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated...

7.5CVSS0.00729EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/04/03 4:31 p.m.12 views

CVE-2025-3167 Tenda AC23 API Interface VerAPIMant denial of service

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated...

7.1CVSS7.1AI score0.00729EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/04/03 4:31 p.m.17 views

CVE-2025-3167 Tenda AC23 API Interface VerAPIMant denial of service

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated...

7.1CVSS0.00729EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.24 views

Linux Distros Unpatched Vulnerability : CVE-2017-3167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the apgetbasicauthpw by third- party modules outside of the authentication phase may lead to...

9.8CVSS7.8AI score0.20231EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/06 12:55 a.m.6 views

CVE-2022-3167

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1...

10CVSS6.7AI score0.00933EPSS
Exploits1References1
F5 Networks
F5 Networks
added 2024/10/25 12:0 a.m.48 views

K000148250: PostgreSQL vulnerabilities CVE-2016-0766, CVE-2015-3167, CVE-2015-0243, CVE-2015-0242, and CVE-2015-0241

Security Advisory Description CVE-2016-0766 PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings GUCS for PL/Java, which allows attackers to gain privileges via...

9CVSS8.5AI score0.05533EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.99 views

RHEL 5 : httpd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - httpd: modssl NULL pointer dereference CVE-2017-3169 - httpd: Weak Digest auth nonce generation in...

8.6AI score0.94999EPSS
Exploits14References13
OSV
OSV
added 2024/04/09 7:15 p.m.6 views

CVE-2024-3167

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘twitterusername’ parameter in versions up to, and including, 2.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

6.4CVSS5.9AI score0.00508EPSS
Exploits0References3
CVE
CVE
added 2024/04/09 6:59 p.m.71 views

CVE-2024-3167

CVE-2024-3167 is an Ocean Extra for WordPress Stored Cross-Site Scripting via the twitter_username parameter in versions up to 2.2.6 (patch released with 2.2.7). Exploitation requires authenticated access (Contributor+), allowing injection of scripts that execute when users visit affected pages. ...

6.4CVSS5.7AI score0.00508EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2024/04/09 12:0 a.m.11 views

WordPress Ocean Extra Plugin <= 2.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Ocean Extra Type Plugin Vulnerable versions = 2.2.6 Fixed in 2.2.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3167 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d97829d0efb6 Credits wesley wcraft Required...

6.4CVSS5.7AI score0.00508EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2024/02/23 10:51 p.m.5 views

CVE-2015-3167

creationtimestamp| type| source ---|---|--- 2024-02-23 22:51:19+00:00| seen| https://t.me/ctinow/192257...

7.5CVSS8.2AI score0.03965EPSS
Exploits0References1
Circl
Circl
added 2024/01/03 7:6 p.m.3 views

CVE-2023-3167

creationtimestamp| type| source ---|---|--- 2024-01-03 19:06:40+00:00| seen| https://t.me/arpsyndicate/2344...

7.2CVSS6.8AI score0.00439EPSS
Exploits0References1
Rows per page
Query Builder