Lucene search
K

107 matches found

RedhatCVE
RedhatCVE
added 2026/02/26 10:14 a.m.3 views

CVE-2026-3170

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed...

4.8CVSS3.9AI score0.00043EPSS
Exploits1References1
Circl
Circl
added 2026/02/25 10:2 a.m.3 views

CVE-2026-3170

creationtimestamp| type| source ---|---|--- 2026-02-25 10:02:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfogggt4rp2u...

4.8CVSS4.8AI score0.00043EPSS
Exploits1References1
EUVD
EUVD
added 2026/01/18 4:32 p.m.1 views

EUVD-2026-3170

A security vulnerability has been detected in lwj flow up to a3d2fe8133db9d3b50fda4f66f68634640344641. This affects the function uploadFile of the file \flow-master\flow-front-rest\src\main\java\com\dragon\flow\web\resource\flow\FormResource.java of the component SVG File Handler. The manipulatio...

6.5CVSS6.3AI score0.0007EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2012-3147

Malware in sbrugna...

5CVSS6.1AI score0.0108EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-3170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The have you forgotten your password links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username...

5.3CVSS6.3AI score0.00498EPSS
Exploits0References2
Circl
Circl
added 2025/04/03 7:35 p.m.0 views

CVE-2025-3170

creationtimestamp| type| source ---|---|--- 2025-04-03 19:35:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10317 2025-04-03 21:55:36+00:00| seen| https://t.me/cvedetector/22002...

9.8CVSS7.3AI score0.00152EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/04/03 5:31 p.m.11 views

CVE-2025-3170 Project Worlds Online Lawyer Management System admin_user.php sql injection

A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS7.7AI score0.00152EPSS
Exploits1References5
CVE
CVE
added 2025/04/03 5:31 p.m.58 views

CVE-2025-3170

The vulnerability CVE-2025-3170 affects Project Worlds Online Lawyer Management System 1.0, specifically the /admin_user.php component. The root cause is improper handling of the block_id/unblock_id parameters, leading to a SQL injection vulnerability. The issue is exploitable remotely and has be...

9.8CVSS7.7AI score0.00152EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/04/03 5:31 p.m.10 views

CVE-2025-3170 Project Worlds Online Lawyer Management System admin_user.php sql injection

A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00152EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2024-3170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.1AI score0.00738EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2015-3170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux-policy when sysctl fs.protectedhardlinks are set to 0 allows local users to cause a denial of service SSH login prevention by creating a hardlink to...

5.5CVSS5.6AI score0.0004EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:0 a.m.20 views

Oracle Siebel CRM (January 2013 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2013 CPU advisory. - Vulnerability in the Siebel CRM component of Oracle Siebel CRM subcomponent: Siebel Calendar. Supported versions that are affected are 8.1.1 an...

5CVSS5.5AI score0.0108EPSS
Exploits0References11
OpenVAS
OpenVAS
added 2024/09/11 12:0 a.m.7 views

openSUSE Security Advisory (SUSE-SU-2024:3170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.00743EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/09/10 12:0 a.m.18 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : postgresql16 (SUSE-SU-2024:3170-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3170-1 advisory. - Upgrade to 16.4 bsc1229013 - CVE-2024-7348: PostgreSQL relation replacement during pgdump executes...

8.8CVSS7.4AI score0.00743EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2024/09/10 12:0 a.m.8 views

SUSE: Security Advisory (SUSE-SU-2024:3170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.00743EPSS
Exploits0References4
NVD
NVD
added 2024/07/16 11:15 p.m.20 views

CVE-2024-3170

Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00738EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2024/07/16 10:14 p.m.18 views

CVE-2024-3170

Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.00738EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2024/07/16 10:14 p.m.19 views

CVE-2024-3170

Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

7AI score0.00738EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/07/16 10:14 p.m.25 views

CVE-2024-3170

Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

0.00738EPSS
Exploits1References2
CVE
CVE
added 2024/07/16 10:14 p.m.133 views

CVE-2024-3170

CVE-2024-3170 affects Google Chrome prior to 121.0.6167.85, where a Use-after-Free in WebRTC could allow a remote attacker to cause heap corruption via a crafted HTML page. The issue is in Chromium’s WebRTC handling and is addressed by updating Chrome to 121.0.6167.85 or later. Public exploits ex...

8.8CVSS6.7AI score0.00738EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder