Lucene search
K

122 matches found

OSV
OSV
added 2025/11/01 9:22 p.m.1 views

MINI-C5M8-GJ76-3235

Bulletin has no description...

7.5CVSS7AI score0.00012EPSS
Exploits0
OSV
OSV
added 2025/09/15 1:11 a.m.1 views

ECHO-3235-462B-0D89

Bulletin has no description...

5.5CVSS7AI score0.00022EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2011-3235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and...

7.6CVSS6AI score0.00983EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:11 a.m.3 views

CVE-2024-3235

The Essential Grid Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the onfrontajaxaction function. This makes it possible for unauthenticated attackers to view private and password protected posts that m...

5.3CVSS6.8AI score0.00938EPSS
Exploits0References1
Circl
Circl
added 2025/04/04 9:35 a.m.7 views

CVE-2025-3235

creationtimestamp| type| source ---|---|--- 2025-04-04 09:35:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10421 2025-04-04 13:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyichx2372z 2025-04-04 14:40:29+00:00| seen|...

9.8CVSS6.2AI score0.00134EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/04/04 9:31 a.m.6 views

CVE-2025-3235 PHPGurukul Old Age Home Management System profile.php sql injection

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname/contactnumber leads to sql injection. It is possible to initiate the attack...

6.5CVSS6.8AI score0.00134EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2022-3235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in GitHub repository vim/vim prior to 9.0.0490. CVE-2022-3235 Note that Nessus relies on the presence of the package as reported by the vendor...

7.8CVSS7.4AI score0.00065EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/11/14 12:0 a.m.19 views

Fedora 37 : vim (2022-4bc60c32a2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-4bc60c32a2 advisory. Security fix for CVE-2022-3705 2139842 - vim upgrade broke :! for displaying terminal output ---- patchlevel 803 ---- The newest upstream commit...

7.8CVSS6.8AI score0.00451EPSS
Exploits8References10
Patchstack
Patchstack
added 2024/04/11 12:0 a.m.10 views

WordPress Essential Grid Plugin <= 3.1.1 is vulnerable to Broken Access Control

Software Essential Grid Type Plugin Vulnerable versions = 3.1.1 Fixed in 3.1.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3235 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 597aadc22d06 Credits 1337Wannabe Required privilege...

5.3CVSS6.6AI score0.00938EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/04/10 5:15 a.m.5 views

CVE-2024-3235

The Essential Grid Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the onfrontajaxaction function. This makes it possible for unauthenticated attackers to view private and password protected posts that m...

5.3CVSS5.2AI score0.00938EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/01/29 10:30 p.m.50 views

aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

Summary Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets, that must trigger error handling to robustly match frame boundaries of proxies in order to protect against injection of additional requests. Additionally, validation could trigger...

6.5CVSS7.2AI score0.00488EPSS
Exploits1References12Affected Software1
Circl
Circl
added 2024/01/04 1:4 a.m.0 views

CVE-2023-3235

creationtimestamp| type| source ---|---|--- 2024-01-04 01:04:37+00:00| seen| https://t.me/arpsyndicate/2394...

8.8CVSS6.9AI score0.00075EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/10/09 12:0 a.m.26 views

Ubuntu: Security Advisory (USN-6420-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.00451EPSS
Exploits11References2
Tenable Nessus
Tenable Nessus
added 2023/10/09 12:0 a.m.61 views

Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6420-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6420-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening ...

9.8CVSS7.2AI score0.00451EPSS
Exploits11References14
Tenable Nessus
Tenable Nessus
added 2023/08/09 12:0 a.m.14 views

SUSE SLES15 Security Update : gstreamer-plugins-bad (SUSE-SU-2023:3235-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3235-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

8.8CVSS6.8AI score0.063EPSS
Exploits0References4
CVE
CVE
added 2023/06/14 7:0 a.m.44 views

CVE-2023-3235

CVE-2023-3235 affects mccms up to 2.6.5. The vulnerability lies in the pic_api function in sys/apps/controllers/admin/Comic.php, where manipulation of the url parameter enables server-side request forgery (SSRF) and can be triggered remotely. Public exploitation has been disclosed. Affected versi...

8.8CVSS7.5AI score0.00075EPSS
Exploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/06/13 12:0 a.m.25 views

EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2023-2251)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing...

9.8CVSS5.5AI score0.00659EPSS
Exploits37References39
OpenVAS
OpenVAS
added 2023/06/07 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2080)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.00451EPSS
Exploits18References2
Tenable Nessus
Tenable Nessus
added 2023/03/28 12:0 a.m.41 views

CBL Mariner 2.0 Security Update: vim (CVE-2022-3235)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3235 advisory. - Use After Free in GitHub repository vim/vim prior to 9.0.0490. CVE-2022-3235 Note that Nessus has not tested for...

7.8CVSS7.5AI score0.00065EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/03/07 12:0 a.m.58 views

Amazon Linux 2 : vim (ALAS-2023-1975)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1975 advisory. A heap buffer overflow vulnerability was found in vim's inscomplinfercasegettext function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completi...

7.8CVSS6.9AI score0.00112EPSS
Exploits21References46
Rows per page
Query Builder