Lucene search
K

85 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/01 12:0 a.m.2 views

Amazon Linux 2 : gstreamer1-plugins-base, --advisory ALAS2-2026-3210 (ALAS-2026-3210)

The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3210 advisory. An integer overflow in the RIFF parser that can cause crashes for certain input files. CVE-2026-2921 Tenable has...

7.8CVSS7.2AI score0.00041EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/03/26 5:3 p.m.1 views

CVE-2026-3210

Incorrect Authorization vulnerability in Drupal Material Icons allows Forceful Browsing.This issue affects Material Icons: from 0.0.0 before 2.0.4...

5.3CVSS5.8AI score0.00044EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 3:21 p.m.1 views

CVE-2026-3210 Material Icons - Moderately critical - Access bypass - SA-CONTRIB-2026-011

Incorrect Authorization vulnerability in Drupal Material Icons allows Forceful Browsing.This issue affects Material Icons: from 0.0.0 before 2.0.4...

5.8AI score0.00044EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.8 views

MiracleLinux 4 : rh-mariadb100-mariadb-10.0.25-4.AXS4 (AXSA:2016-462:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-462:01 advisory. MariaDB is a community developed branch of MySQL. MariaDB is a multi-user, multi-threaded SQL database server. It is a client/server implementation...

9.8CVSS7.7AI score0.2214EPSS
Exploits12References55
RedhatCVE
RedhatCVE
added 2025/05/22 9:29 p.m.6 views

CVE-2021-3210

components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound = 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectId parameter...

9.6CVSS7.9AI score0.01753EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:28 a.m.5 views

CVE-2013-3210

Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain...

5CVSS6.4AI score0.0023EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/06 5:22 a.m.10 views

CVE-2025-3210

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /birthingpending.php. The manipulation of the argument birthid leads to sql injection. The attack may be launched...

7.5CVSS7.4AI score0.00238EPSS
Exploits1References1
Circl
Circl
added 2025/04/04 5:35 a.m.0 views

CVE-2025-3210

creationtimestamp| type| source ---|---|--- 2025-04-04 05:35:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10400 2025-04-04 07:58:40+00:00| seen| https://t.me/cvedetector/22075...

7.5CVSS6.2AI score0.00238EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/04/04 5:0 a.m.11 views

CVE-2025-3210 code-projects Patient Record Management System birthing_pending.php sql injection

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /birthingpending.php. The manipulation of the argument birthid leads to sql injection. The attack may be launched...

6.5CVSS0.00238EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/04/04 5:0 a.m.6 views

CVE-2025-3210 code-projects Patient Record Management System birthing_pending.php sql injection

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /birthingpending.php. The manipulation of the argument birthid leads to sql injection. The attack may be launched...

6.5CVSS7.6AI score0.00238EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/02/06 12:43 a.m.6 views

CVE-2022-3210

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044 by defaul...

8.8CVSS7.1AI score0.00342EPSS
Exploits0References1
OSV
OSV
added 2024/10/30 3:34 p.m.2 views

SUSE-SU-2024:3811-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20241028T152002 2024-10-28T15:20:02Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated: GO-2024-3207 GO-2024-3208 GO-2024-3210 GO-2024-3211 GO-2024-3212 GO-2024-3213 GO-2024-3214 GO-2024-3215...

7.3AI score
Exploits0References1
OpenVAS
OpenVAS
added 2024/09/12 12:0 a.m.12 views

openSUSE Security Advisory (SUSE-SU-2024:3210-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.4CVSS5.7AI score0.00015EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2024/05/17 12:0 a.m.15 views

GitLab 15.11 < 16.1.5 / 16.2 < 16.2.5 / 16.3 < 16.3.1 (CVE-2023-3210)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An...

6.5CVSS6.4AI score0.00507EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/04/11 12:0 a.m.10 views

WordPress ProfilePress Plugin <= 4.15.5 is vulnerable to Cross Site Scripting (XSS)

Software ProfilePress Type Plugin Vulnerable versions = 4.15.5 Fixed in 4.15.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3210 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID f7a661f8be36 Credits stealthcopter Required...

6.4CVSS5.8AI score0.00519EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2023/09/01 2:13 p.m.0 views

CVE-2023-3210

creationtimestamp| type| source ---|---|--- 2023-09-01 14:13:49+00:00| seen| https://t.me/cibsecurity/69623...

6.5CVSS6.2AI score0.00507EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2023/09/01 11:15 a.m.16 views

CVE-2023-3210

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content...

6.5CVSS6.5AI score0.00507EPSS
Exploits0References3
OSV
OSV
added 2023/09/01 10:31 a.m.17 views

CVE-2023-3210 Inefficient Regular Expression Complexity in GitLab

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content...

6.5CVSS6.2AI score0.00507EPSS
Exploits0References5
Cvelist
Cvelist
added 2023/09/01 10:31 a.m.12 views

CVE-2023-3210 Inefficient Regular Expression Complexity in GitLab

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content...

6.5CVSS6.3AI score0.00507EPSS
Exploits0References2
CVE
CVE
added 2023/09/01 10:31 a.m.454 views

CVE-2023-3210

CVE-2023-3210 affects GitLab, with the issue present in all versions starting from 15.11 before 16.1.5, all 16.2.x before 16.2.5, and all 16.3.x before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content, resulting in a high availability imp...

6.5CVSS6.1AI score0.00507EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder