Lucene search
K

221 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/19 12:0 a.m.3 views

Amazon Linux 2 : lcms2, --advisory ALAS2-2026-3192 (ALAS-2026-3192)

The version of lcms2 installed on the remote host is prior to 2.6-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3192 advisory. A heap buffer overflow vulnerability has been identified in thesmooth2 in cmsgamma.c in lcms2-2.16 which allows a remote attacker to...

7.5CVSS6AI score0.00586EPSS
Exploits0References4
Circl
Circl
added 2026/02/25 5:27 p.m.2 views

CVE-2026-3192

creationtimestamp| type| source ---|---|--- 2026-02-25 17:27:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfp7cu6sqx24...

8.1CVSS4.8AI score0.00277EPSS
Exploits1References1
NVD
NVD
added 2026/02/25 5:25 p.m.1 views

CVE-2026-3192

A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function authenticate of the file rpcserverbase.py of the component RPC Credential Handler. The manipulation leads to improper authentication. The attack is possible to be carried out remotely. The attack ...

8.1CVSS0.00277EPSS
Exploits1References3
CVE
CVE
added 2026/02/25 4:2 p.m.9 views

CVE-2026-3192

Chia Blockchain 2.1.0 is affected by CVE-2026-3192. The vulnerability resides in the RPC Credential Handler’s rpc_server_base.py function _authenticate, enabling improper authentication. It can be exploited remotely, with high attack complexity and considered difficult to exploit. The CVE entry n...

8.1CVSS4.8AI score0.00277EPSS
Exploits1References3Affected Software1
EUVD
EUVD
added 2026/01/18 12:31 a.m.3 views

EUVD-2026-3192

EUVD-2026-3192...

7.5CVSS6.4AI score0.00018EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.6 views

MiracleLinux 4 : httpd-2.2.15-9.2.0.1.AXS4 (AXSA:2011-459:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-459:01 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed with this release: CVE-2011-3192 The byterange filter in the...

7.8CVSS7.5AI score0.90865EPSS
Exploits17References2
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.7 views

MiracleLinux 3 : httpd-2.2.3-53.1.0.1.AXS3 (AXSA:2011-297:02)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-297:02 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed with this release: CVE-2011-3192 The byterange filter in the...

7.8CVSS7.5AI score0.90865EPSS
Exploits17References2
RedhatCVE
RedhatCVE
added 2025/05/23 12:55 a.m.3 views

CVE-2022-3192

Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 before 2.8.6...

5.3CVSS6.9AI score0.00377EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:8 a.m.2 views

CVE-2016-3192

Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files...

6.5CVSS7AI score0.00186EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/06 5:25 a.m.8 views

CVE-2025-3192

Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery SSRF in the setUrl function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories...

8.8CVSS6.9AI score0.0046EPSS
Exploits0References1
NVD
NVD
added 2025/04/04 5:15 a.m.9 views

CVE-2025-3192

Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery SSRF in the setUrl function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories...

8.8CVSS0.0046EPSS
Exploits0References2
CVE
CVE
added 2025/04/04 5:0 a.m.47 views

CVE-2025-3192

CVE-2025-3192 affects the Spatie/browsershot package with SSRF in the setUrl() function caused by insufficient input validation. Connected sources identify vulnerable ranges such as 0.0.0 (and up to 3.1 in PT-2025-14839) and, per GHSA guidance, from 0.0.0 to 5.0.3. The underlying issue allows an ...

8.8CVSS7.1AI score0.0046EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/04/04 5:0 a.m.4 views

CVE-2025-3192

Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery SSRF in the setUrl function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories...

8.8CVSS7.1AI score0.0046EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2014-3192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, a...

7.5CVSS8.3AI score0.017EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/09/11 12:0 a.m.13 views

SUSE SLES12 Security Update : postgresql16 (SUSE-SU-2024:3192-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3192-1 advisory. - Upgrade to 13.16 bsc1229013 - CVE-2024-7348: PostgreSQL relation replacement during pgdump executes arbitrary SQL. bsc1229013 Tenable has...

8.8CVSS7.4AI score0.00764EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2024/09/10 12:0 a.m.9 views

SUSE: Security Advisory (SUSE-SU-2024:3192-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.00764EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/04/29 6:22 a.m.11 views

CVE-2024-3192 MailCleaner Admin Interface cross site scripting

A vulnerability, which was classified as problematic, was found in MailCleaner up to 2023.03.14. Affected is an unknown function of the component Admin Interface. The manipulation as part of Mail Message leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

5CVSS6.2AI score0.00167EPSS
Exploits1References5
Circl
Circl
added 2024/02/28 10:41 a.m.2 views

CVE-2016-3192

creationtimestamp| type| source ---|---|--- 2024-02-28 10:41:11+00:00| seen| https://t.me/ctinow/195306...

6.5CVSS6.4AI score0.00186EPSS
Exploits0References1
Prion
Prion
added 2023/09/08 3:15 a.m.33 views

Race condition

GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...

5CVSS6.7AI score0.90865EPSS
Exploits17References1Affected Software3
Circl
Circl
added 2023/06/11 2:33 p.m.0 views

CVE-2023-3192

creationtimestamp| type| source ---|---|--- 2023-06-11 14:33:16+00:00| seen| https://t.me/cibsecurity/65123...

5.4CVSS4.6AI score0.0016EPSS
Exploits1References1
Rows per page
Query Builder