Lucene search
K

86 matches found

RedhatCVE
RedhatCVE
added 2026/03/02 7:44 a.m.6 views

CVE-2026-3380

A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...

9CVSS7.5AI score0.00037EPSS
Exploits1References1
CVE
CVE
added 2026/03/01 3:2 a.m.12 views

CVE-2026-3380

CVE-2026-3380 affects the Tenda F453 firmware 1.0.0.3. The vulnerability is in the function frmL7ImForm of the file /goform/L7Im , where manipulating the page argument causes a buffer overflow. It is exploitable remotely, and public exploit information exists. Several sources corroborate the issu...

9CVSS7.5AI score0.00037EPSS
Exploits1References5Affected Software1
Circl
Circl
added 2026/02/28 7:7 a.m.2 views

CVE-2026-3380

creationtimestamp| type| source ---|---|--- 2026-02-28 07:07:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116146990737576376 2026-03-01 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116152036747115760 2026-03-01 04:30:30+00:00| seen|...

9CVSS7.2AI score0.00037EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/02/28 12:0 a.m.4 views

PT-2026-22469

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3 Description A buffer overflow issue exists in the frmL7ImForm function of the /goform/L7Im file. The issue is triggered by manipulating the page argument. The exploit for this issue has been made public and could be...

9CVSS7.2AI score0.00037EPSS
Exploits1References16
RedhatCVE
RedhatCVE
added 2025/05/22 11:28 a.m.6 views

CVE-2013-3380

The administrative web interface in the Access Control Server in Cisco Secure Access Control System ACS does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279...

4CVSS6AI score0.00143EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:15 a.m.3 views

CVE-2010-3380

The 1 init.d/slurm and 2 init.d/slurmdbd scripts in SLURM before 2.1.14 place the . dot directory in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

6.9CVSS6.8AI score0.00048EPSS
Exploits0References1
Circl
Circl
added 2025/04/07 7:45 p.m.0 views

CVE-2025-3380

creationtimestamp| type| source ---|---|--- 2025-04-07 19:45:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10777 2025-04-07 22:55:56+00:00| seen| https://t.me/cvedetector/22352...

9.8CVSS7.3AI score0.00483EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/04/07 7:0 p.m.10 views

CVE-2025-3380 PCMan FTP Server FEAT Command buffer overflow

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Affected by this issue is some unknown functionality of the component FEAT Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed t...

7.5CVSS6.8AI score0.00483EPSS
Exploits1References4
CVE
CVE
added 2025/04/07 7:0 p.m.54 views

CVE-2025-3380

CVE-2025-3380 affects PCMan FTP Server 2.0.7, specifically the FEAT Command Handler. The vulnerability is a buffer overflow in an unknown function of FEAT, with remote attack potential and public exploit disclosure. Multiple connected sources corroborate that exploitation could impact confidentia...

9.8CVSS7.4AI score0.00483EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.23 views

openSUSE: Security Advisory for qt6 (SUSE-SU-2023:3380-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.00137EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/09/27 12:0 a.m.8 views

WordPress Customizer Export/Import Plugin < 0.9.5 PHP Object Injection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpbeaverbuilder:customizerexport%2fimport"; if description...

7.2CVSS7.1AI score0.00991EPSS
Exploits1References1
CVE
CVE
added 2023/06/23 9:31 a.m.140 views

CVE-2023-3380

WAVLINK WN579X3 routers are affected by a Remote Command Execution vulnerability in the Ping Test component (/cgi-bin/adm.cgi) via the pingIp parameter. The issue allows unauthenticated remote command injection and can enable an attacker to compromise the router and potentially intercept traffic....

9.8CVSS7.4AI score0.80276EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2022/10/31 12:0 a.m.49 views

CVE-2022-3380

The CVE-2022-3380 entry concerns the WordPress plugin Customizer Export/Import, affected versions prior to 0.9.5. The vulnerability arises from unserializing the content of an imported file, enabling PHP object injection if an admin imports a malicious file and a gadget chain is present on the bl...

7.2CVSS7.2AI score0.00991EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/31 12:0 a.m.2 views

CVE-2022-3380 Customizer Export/Import < 0.9.5 - Admin+ PHP Objection Injection

The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports intentionally or not a malicious file and a suitable gadget chain is present on the blog...

7.1AI score0.00991EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/10/31 12:0 a.m.15 views

CVE-2022-3380 Customizer Export/Import < 0.9.5 - Admin+ PHP Objection Injection

The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports intentionally or not a malicious file and a suitable gadget chain is present on the blog...

7.3AI score0.00991EPSS
Exploits1References1
Circl
Circl
added 2021/11/10 8:36 p.m.0 views

CVE-2021-3380

creationtimestamp| type| source ---|---|--- 2021-11-10 20:36:44+00:00| seen| https://t.me/cibsecurity/32193...

6.5CVSS6.4AI score0.00235EPSS
Exploits1References1
CVE
CVE
added 2021/11/10 4:30 p.m.30 views

CVE-2021-3380

CVE-2021-3380 is an IDOR vulnerability in the ICREM H8 SSRMS Print Invoice functionality. The root cause is insecure direct object reference, allowing disclosure of sensitive information. The description is confirmed across multiple sources (NVD, RH, CVE list, CNNVD). No concrete patch/version re...

6.5CVSS6.2AI score0.00235EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/09/01 12:0 a.m.49 views

RHEL 8 : kpatch-patch (RHSA-2021:3380)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3380 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

8.7CVSS7AI score0.85239EPSS
Exploits24References10
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2020:3380-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.7AI score0.11468EPSS
Exploits1References25
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.78 views

SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2020:3380-1) (KRACK)

This update for wpasupplicant fixes the following issues : Security issue fixed : CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed : Enable SAE support jscSLE-14992. Limit P2PDEVICE name to appropriate ifname size. Fix wicked wlan bsc11569...

8.1CVSS7.1AI score0.11468EPSS
Exploits1References67
Rows per page
Query Builder