Lucene search
K

106 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:38 p.m.7 views

CVE-2021-3313

Plone CMS until version 5.2.4 has a stored Cross-Site Scripting XSS vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and...

5.4CVSS5.2AI score0.00444EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:28 a.m.8 views

CVE-2010-3313

phpgwapi/js/fckeditor/editor/dialog/fckspellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to execute arbitrary commands v...

7.5CVSS7.9AI score0.023EPSS
Exploits0References1
Circl
Circl
added 2025/04/06 8:24 a.m.6 views

CVE-2025-3313

creationtimestamp| type| source ---|---|--- 2025-04-06 08:24:33+00:00| seen| https://bsky.app/profile/potato.software/post/3lm4zgq3dcz2k 2025-04-06 08:37:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10634 2025-04-06 09:12:36+00:00| seen|...

9.8CVSS7.3AI score0.0011EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/04/06 8:0 a.m.15 views

CVE-2025-3313 PHPGurukul Men Salon Management System add-customer.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit...

7.5CVSS0.0011EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/04/06 8:0 a.m.8 views

CVE-2025-3313 PHPGurukul Men Salon Management System add-customer.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit...

7.5CVSS7.4AI score0.0011EPSS
Exploits1References5
CVE
CVE
added 2025/04/06 8:0 a.m.57 views

CVE-2025-3313

CVE-2025-3313 affects PHPGurukul Men Salon Management System 1.0. The vulnerability is in an unknown function of the file /admin/add-customer.php, where manipulation of the Name parameter leads to SQL injection. It is described as exploitable remotely, with the exploit disclosed publicly. The con...

9.8CVSS7.5AI score0.0011EPSS
Exploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-3313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: MyISAM. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 an...

4.7CVSS6.2AI score0.00071EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 9:59 a.m.5 views

CVE-2024-3313

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Server 2021 and Substation Server 2021...

8.6CVSS7AI score0.00099EPSS
Exploits0References1
NVD
NVD
added 2024/04/09 11:15 p.m.11 views

CVE-2024-3313

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Server 2021 and Substation Server 2021...

8.6CVSS8.6AI score0.00099EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/09 10:40 p.m.17 views

CVE-2024-3313 SUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy Component

SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Server 2021 and Substation Server 2021...

8.6CVSS8.7AI score0.00099EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.29 views

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:3313-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.5AI score0.02125EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.25 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10138-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.01103EPSS
Exploits6References2
Circl
Circl
added 2024/02/26 8:41 a.m.2 views

CVE-2013-3313

creationtimestamp| type| source ---|---|--- 2024-02-26 08:41:45+00:00| published-proof-of-concept| https://t.me/ctinow/193158...

7.5CVSS7.4AI score0.01733EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2023/12/04 12:0 a.m.24 views

Trellix Enterprise Security Manager < 11.6.7 Command Injection

The version of Trellix Enterprise Security Manager running on the remote web server is prior to 11.6.7. It is, therefore, affected by multiple command injection vulnerabilities. - A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip files. Incomplete...

8.8CVSS8.3AI score0.00597EPSS
Exploits0References3
OSV
OSV
added 2023/08/31 12:15 p.m.1 views

BELL-CVE-2017-3313 CVE-2017-3313 does not affect BellSoft software

Bulletin has no description...

4.7CVSS5.8AI score0.00071EPSS
Exploits0References1
Circl
Circl
added 2023/07/03 12:22 p.m.0 views

CVE-2023-3313

creationtimestamp| type| source ---|---|--- 2023-07-03 12:22:24+00:00| seen| https://t.me/cibsecurity/65855...

7.8CVSS7.5AI score0.00154EPSS
Exploits0References1
CVE
CVE
added 2023/07/03 7:53 a.m.2489 views

CVE-2023-3313

CVE-2023-3313 pertains to an OS command injection in the Trellix Enterprise Security Manager (ESM) certificate API, caused by insufficient neutralization of special elements. The vulnerability could let an unauthorized user with local access execute system commands, potentially escalating privile...

7.8CVSS8.1AI score0.00154EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/11/18 12:0 a.m.36 views

MariaDB 5.5.0 < 5.5.55 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.55. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.55 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are...

7.7CVSS6.8AI score0.025EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2022/11/18 12:0 a.m.26 views

MariaDB 10.1.0 < 10.1.22 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.22. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.22 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: MyISAM. Supported versions that are affected a...

7.5CVSS6.8AI score0.025EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/11/18 12:0 a.m.23 views

MariaDB 10.2.0 < 10.2.5 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.5 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: MyISAM. Supported versions that are affected are...

7.5CVSS6.8AI score0.025EPSS
Exploits0References3
Rows per page
Query Builder