Lucene search
K

130 matches found

OSV
OSV
added 8 hours ago2 views

MINI-V6HQ-3245-5MVF

Bulletin has no description...

9.1CVSS5.7AI score0.00042EPSS
Exploits0
EUVD
EUVD
added 2026/01/19 3:2 a.m.5 views

EUVD-2026-3245

A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the...

5.3CVSS3.9AI score0.00021EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

MiracleLinux 4 : libuser-0.56.13-8.AXS4 (AXSA:2015-374:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-374:01 advisory. The libuser library implements a standardized interface for manipulating and administering user and group accounts. The library uses pluggable...

7.2CVSS7.2AI score0.21424EPSS
Exploits10References3
RedhatCVE
RedhatCVE
added 2025/05/22 11:27 a.m.8 views

CVE-2013-3245

plugins/demux/libmkvplugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer...

6.8CVSS8.2AI score0.01865EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/04/06 12:23 p.m.17 views

CVE-2025-3245

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file librarymanagement/src/LibraryManagement/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may b...

9.8CVSS7.3AI score0.00182EPSS
Exploits1References1
Circl
Circl
added 2025/04/04 12:36 p.m.7 views

CVE-2025-3245

creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10436 2025-04-04 13:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyicilhad2u 2025-04-04 16:20:54+00:00| seen|...

9.8CVSS6.2AI score0.00182EPSS
Exploits1References3
NVD
NVD
added 2025/04/04 12:15 p.m.11 views

CVE-2025-3245

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file librarymanagement/src/LibraryManagement/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may b...

9.8CVSS0.00182EPSS
Exploits1References5
OSV
OSV
added 2025/04/04 12:15 p.m.1 views

CVE-2025-3245

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file librarymanagement/src/LibraryManagement/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may b...

9.8CVSS5.8AI score0.00182EPSS
Exploits1References5
CVE
CVE
added 2025/04/04 12:0 p.m.61 views

CVE-2025-3245

CVE-2025-3245 affects itsourcecode Library Management System v1.0. The vulnerable component is the Search function in library_management/src/Library_Management/Forgot.java, where manipulation of the txtuname argument enables a SQL injection. The issue can be exploited remotely and the exploit has...

9.8CVSS6.7AI score0.00182EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/04 12:0 p.m.14 views

CVE-2025-3245 itsourcecode Library Management System Forgot.java search sql injection

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file librarymanagement/src/LibraryManagement/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may b...

6.5CVSS7.5AI score0.00182EPSS
Exploits1References5
NVD
NVD
added 2023/07/17 2:15 p.m.15 views

CVE-2023-3245

The Floating Chat Widget WordPress plugin before 3.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00113EPSS
Exploits2References1
Cvelist
Cvelist
added 2023/07/17 1:29 p.m.13 views

CVE-2023-3245 Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting

The Floating Chat Widget WordPress plugin before 3.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.9AI score0.00113EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2023/07/17 1:29 p.m.7 views

CVE-2023-3245 Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting

The Floating Chat Widget WordPress plugin before 3.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.7AI score0.00113EPSS
Exploits2References1
CVE
CVE
added 2023/07/17 1:29 p.m.52 views

CVE-2023-3245

CVE-2023-3245 affects the Floating Chat Widget WordPress plugin (

4.8CVSS4.9AI score0.00113EPSS
Exploits2References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/22 12:0 a.m.60 views

RHEL 9 : git (RHSA-2023:3245)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3245 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

7.8CVSS7.5AI score0.03559EPSS
Exploits5References12
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.16 views

Debian: Security Advisory (DLA-468-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.5AI score0.21424EPSS
Exploits10References2
F5 Networks
F5 Networks
added 2023/02/21 7:58 p.m.35 views

K05770600: Linux libuser vulnerability CVE-2015-3246

Security Advisory Description libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service inconsistent file state by causing an error during the modification. NOTE:...

7.2CVSS7.2AI score0.21424EPSS
Exploits9Affected Software20
IBM Security Bulletins
IBM Security Bulletins
added 2022/12/05 11:45 p.m.52 views

Security Bulletin: This Power System update is being released to address multiple CVEs for vTPM1.2

Summary This update addresses multiple CVEs that impacts any VM configured with a virtual trusted platform module vTPM version 1.2 Vulnerability Details CVEID:CVE-2018-5407 DESCRIPTION: Multiple SMT/Hyper-Threading architectures and processors could allow a local attacker to obtain sensitive...

7.5CVSS6.7AI score0.19914EPSS
Exploits8
Cvelist
Cvelist
added 2022/09/20 1:15 p.m.15 views

CVE-2022-3245 Code Injection in display of tag title on saving tags in microweber/microweber

HTML injection attack is closely related to Cross-site Scripting XSS. HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input...

4.3CVSS6.4AI score0.00427EPSS
Exploits1References2
CVE
CVE
added 2022/09/20 1:15 p.m.67 views

CVE-2022-3245

CVE-2022-3245 affects Microweber (Microweber project) with an HTML injection vulnerability in the tag creation/saving flow (HTML injection capable of defacing the page, related to XSS). Root cause: insufficient input validation on tag-related content. Documented impact is HTML injection; explicit...

6.1CVSS5.2AI score0.00427EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder