Lucene search
+L

207 matches found

Circl
Circl
added 2026/07/22 5:0 p.m.8 views

CVE-2018-3214

creationtimestamp| type| source ---|---|--- 2026-07-22 17:00:05+00:00| seen| Telegram/5IRIQQOTDCKuLb20SN-AA5fEEYRiSpvsdYTvkd2O8wAhw 2026-07-22 17:00:05+00:00| seen| Telegram/nZl5UlvWmDfGnVyzuctdLXeNPSthYrXPLlU07drZckp1EYQ 2026-07-23 00:00:08+00:00| published-proof-of-concept|...

5.3CVSS6.2AI score0.07EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/07/21 5:36 a.m.74 views

Exploit for CVE-2018-3214

No d...

5.3CVSS6.3AI score0.07EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/03/26 5:3 p.m.9 views

CVE-2026-3214

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.This issue affects CAPTCHA: from 0.0.0 before 1.17.0, from 2.0.0 before 2.0.10...

6.5CVSS5.8AI score0.00268EPSS
SaveExploits0References1
Circl
Circl
added 2026/03/25 6:1 p.m.10 views

CVE-2026-3214

creationtimestamp| type| source ---|---|--- 2026-03-25 18:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvoapfx5d2o...

6.5CVSS5.8AI score0.00268EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.5 views

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.191.b12-0.el7 (AXSA:2018-3359:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3359:06 advisory. OpenJDK: Improper field access checks Hotspot, 8199226 CVE-2018-3169 OpenJDK: Unrestricted access to scripting engine Scripting, 8202936 CVE-2018-31...

9CVSS6.5AI score0.07156EPSS
SaveExploits3References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-3214

Malware in sbrugna...

8.8CVSS8.8AI score0.04544EPSS
SaveExploits2References4
Chainguard
Chainguard
added 2025/08/23 2:16 p.m.7 views

CVE-2018-3214 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9...

5.3CVSS6.1AI score0.07EPSS
SaveExploits1
NVD
NVD
added 2025/04/04 6:15 a.m.41 views

CVE-2025-3214

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack can be launched remotely. The exploit...

5.3CVSS0.00468EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/04/04 6:0 a.m.14 views

CVE-2025-3214 JFinal CMS readTemplate engine.getTemplate path traversal

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack can be launched remotely. The exploit...

5.3CVSS7.1AI score0.00468EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/04/04 6:0 a.m.22 views

CVE-2025-3214 JFinal CMS readTemplate engine.getTemplate path traversal

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack can be launched remotely. The exploit...

5.3CVSS0.00468EPSS
SaveExploits0References4
CVE
CVE
added 2025/04/04 6:0 a.m.71 views

CVE-2025-3214

CVE-2025-3214 affects JFinal CMS up to version 5.2.4. The vulnerability resides in the readTemplate function’s engine.getTemplate, where manipulating the template argument enables path traversal. Exploitation can be remote, and public proofs exist, but the real existence of the vulnerability is d...

5.3CVSS7.1AI score0.00468EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2015-3214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pitioportread in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might...

6.9CVSS7.1AI score0.01594EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2025/02/06 12:41 a.m.13 views

CVE-2022-3214

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing...

9.8CVSS7.6AI score0.01544EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/09/13 12:0 a.m.26 views

openSUSE Security Advisory (SUSE-SU-2024:3214-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.5AI score0.01127EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/05/28 12:0 a.m.60 views

Oracle Linux 8 : gmp (ELSA-2024-3214)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3214 advisory. 1:6.1.2-11 - Fix: CVE-2021-43618 Resolves: RHEL-23055 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

7.5CVSS7.2AI score0.03425EPSS
SaveExploits1References2
NVD
NVD
added 2024/04/09 7:15 p.m.33 views

CVE-2024-3214

The Relevanssi – A Better Search plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are...

9.8CVSS6AI score0.00769EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/09 6:59 p.m.74 views

CVE-2024-3214

CVE-2024-3214 affects Relevanssi – A Better Search (WordPress) up to version 4.22.1. It allows unauthenticated CSV injection by embedding untrusted input in exported CSV files, with potential code execution when the CSV is opened in a vulnerable environment. The vulnerability is classified as una...

9.8CVSS9.3AI score0.00769EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.16 views

WordPress Relevanssi Premium Plugin <= 2.25.1 is vulnerable to CSV Injection

Software Relevanssi Premium Type Plugin Vulnerable versions = 2.25.1 Fixed in 2.25.2 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2024-3214 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID c945697bfd2b Credits Thura Moe Myint mgthuramoemyint Required...

9.8CVSS6.9AI score0.00769EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.22 views

WordPress Relevanssi Plugin <= 4.22.1 is vulnerable to CSV Injection

Software Relevanssi Type Plugin Vulnerable versions = 4.22.1 Fixed in 4.22.2 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2024-3214 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 3b70af9574ea Credits Thura Moe Myint mgthuramoemyint Required privilege...

9.8CVSS6.9AI score0.00769EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.21 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0131-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.13813EPSS
SaveExploits0References2
Rows per page
Query Builder