Lucene search
K

68 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/30 12:0 a.m.2 views

Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3271 (ALAS-2026-3271)

The version of thunderbird installed on the remote host is prior to 140.9.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3271 advisory. Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 an...

9.8CVSS6.2AI score0.00071EPSS
Exploits0References8
Circl
Circl
added 2026/02/27 2:40 a.m.3 views

CVE-2026-3271

creationtimestamp| type| source ---|---|--- 2026-02-27 02:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfsopc7lgy2v 2026-02-27 19:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfugk35n5j2m...

9.8CVSS7.2AI score0.00055EPSS
Exploits1References2
NVD
NVD
added 2026/02/27 12:16 a.m.4 views

CVE-2026-3271

A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the file /goform/P2pListFilterof of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and coul...

9.8CVSS0.00055EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 6:34 p.m.4 views

CVE-2021-3271

PressBooks 5.17.3 contains a cross-site scripting XSS. Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS...

4.8CVSS5.2AI score0.00411EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:55 a.m.5 views

CVE-2011-3271

Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service device crash via crafted TCP packets to port 4786, aka Bug ID CSCto10165...

10CVSS8.1AI score0.25006EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:31 a.m.5 views

CVE-2013-3271

EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...

5CVSS7AI score0.00275EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/14 12:0 a.m.48 views

Rocky Linux 8 : bind and dhcp (RLSA-2024:3271)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3271 advisory. bind9: Parsing large DNS messages may cause excessive CPU load CVE-2023-4408 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387...

7.5CVSS7.1AI score0.43701EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2024/05/29 12:0 a.m.49 views

Oracle Linux 8 : bind / and / dhcp (ELSA-2024-3271)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3271 advisory. - Speed up parsing of DNS messages with many different names CVE-2023-4408 - Prevent increased CPU consumption in DNSSEC validator CVE-2023-50387...

7.5CVSS7.1AI score0.43701EPSS
Exploits1References4
vulnersOsv
vulnersOsv
added 2024/04/16 12:30 a.m.2 views

langtrace-python-sdk (>=1.0.9 <=1.1.30), lavague (>=1.0.3.post1 <=1.0.15) +377 more potentially affected by CVE-2024-3271 via llama-index-core (>=0.10.0 <=0.10.19)

llama-index-core PYPI version =0.10.0, =1.0.9, =1.0.3.post1, =1.0.15 - llama-index-agent-openai =0.1.0 - llama-index-agent-openai-legacy =0.1.0 - llama-index-callbacks-aim =0.1.0 - llama-index-callbacks-argilla =0.1.0 - llama-index-callbacks-arize-phoenix =0.1.0 - llama-index-callbacks-deepeval...

9.8CVSS7.2AI score0.01239EPSS
Exploits1
NVD
NVD
added 2024/04/16 12:15 a.m.7 views

CVE-2024-3271

A command injection vulnerability exists in the run-llama/llamaindex repository, specifically within the safeeval function. Attackers can bypass the intended security mechanism, which checks for the presence of underscores in code generated by LLM, to execute arbitrary code. This is achieved by...

9.8CVSS10AI score0.01239EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/04/16 12:0 a.m.18 views

CVE-2024-3271 Command Injection in run-llama/llama_index

A command injection vulnerability exists in the run-llama/llamaindex repository, specifically within the safeeval function. Attackers can bypass the intended security mechanism, which checks for the presence of underscores in code generated by LLM, to execute arbitrary code. This is achieved by...

9.8CVSS10AI score0.01239EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/04/16 12:0 a.m.17 views

CVE-2024-3271 Command Injection in run-llama/llama_index

A command injection vulnerability exists in the run-llama/llamaindex repository, specifically within the safeeval function. Attackers can bypass the intended security mechanism, which checks for the presence of underscores in code generated by LLM, to execute arbitrary code. This is achieved by...

9.8CVSS8.6AI score0.01239EPSS
Exploits1References2
CVE
CVE
added 2024/04/16 12:0 a.m.59 views

CVE-2024-3271

CVE-2024-3271 affects the run-llama/llama_index project, specifically the safe_eval function. The issue allows command execution via crafted input that bypasses the underscore check in code produced by LLMs, enabling remote code execution on the server. Connected sources corroborate a command-inj...

9.8CVSS8.6AI score0.01239EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2023/07/10 4:15 p.m.10 views

CVE-2023-3271

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing unauthenticated endpoints...

8.2CVSS8.2AI score0.0026EPSS
Exploits0References3
CVE
CVE
added 2023/07/10 9:26 a.m.2481 views

CVE-2023-3271

CVE-2023-3271 concerns the SICK ICR890-4, where an improper access control flaw allows an unauthenticated remote attacker to gather system information and download data via unauthenticated REST API endpoints. The issue is documented across multiple feeds (NVD, Red Hat, PRION, CNNVD, and Sick PSIR...

8.2CVSS7.2AI score0.0026EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2022/09/15 12:0 a.m.25 views

openSUSE: Security Advisory for perl (SUSE-SU-2022:3271-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.9CVSS6.2AI score0.01383EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/09/15 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2022:3271-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.2AI score0.01383EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2020:3271-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.2AI score0.00248EPSS
Exploits0References2
CVE
CVE
added 2021/01/22 5:8 p.m.54 views

CVE-2021-3271

PressBooks 5.17.3 is affected by a stored cross-site scripting (XSS) vulnerability. The CVE-2021-3271 entry describes that a crafted long description in the Book Info can trigger stored XSS when users open or preview a book page. Multiple connected sources (Red Hat advisory, OSV, CNVD, and CVE re...

4.8CVSS4.7AI score0.00411EPSS
Exploits2References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/17 5:19 a.m.26 views

Security Bulletin: Multiple Vulnerabilities in Oracle Outside In Technology affect IBM Rational DOORS Next Generation

Summary IBM Rational DOORS Next Generation® is affected by multiple vulnerabilities in the Oracle Outside In Technology® that is used as a component. Vulnerability Details CVEID: CVE-2017-3266 DESCRIPTION: An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Filters...

9.8CVSS1.9AI score0.02878EPSS
Exploits2Affected Software1
Rows per page
Query Builder