Lucene search
K

62 matches found

OSV
OSV
added 2026/05/27 10:47 a.m.2 views

MINI-3394-GHQ2-FWMW

Bulletin has no description...

7.8CVSS5.7AI score0.00008EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/02 1:43 p.m.2 views

CVE-2026-3394

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloudwav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local...

7.8CVSS5.6AI score0.00031EPSS
Exploits1References1
Circl
Circl
added 2026/03/01 1:59 p.m.2 views

CVE-2026-3394

creationtimestamp| type| source ---|---|--- 2026-03-01 13:59:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfyvk5vy3a2u...

7.8CVSS5.9AI score0.00031EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/01 12:32 p.m.1 views

CVE-2026-3394 jarikomppa soloud WAV File soloud_wav.cpp loadwav memory corruption

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloudwav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local...

4.8CVSS5.6AI score0.00031EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/03/01 12:32 p.m.3 views

CVE-2026-3394

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloudwav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local...

7.8CVSS5.6AI score0.00031EPSS
Exploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 3:54 a.m.5 views

CVE-2023-3394

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

6.8CVSS6.8AI score0.00109EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:19 a.m.7 views

CVE-2022-3394

The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform exports to execute arbitrary code on the site. By default only administrators can...

7.2CVSS7.7AI score0.01276EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:28 p.m.5 views

CVE-2021-3394

Millennium Millewin also known as "Cartella clinica" 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation...

8.8CVSS6.8AI score0.0086EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/05/02 1:17 p.m.10 views

CVE-2025-3394

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

8.5CVSS7AI score0.00066EPSS
Exploits0References3
Circl
Circl
added 2025/04/30 1:0 p.m.4 views

CVE-2025-3394

creationtimestamp| type| source ---|---|--- 2025-04-30 13:00:03+00:00| seen| https://bsky.app/profile/potato.software/post/3lnztzbfdhz2z 2025-04-30 13:13:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14027 2025-04-30 15:31:40+00:00| seen|...

8.5CVSS4.8AI score0.00066EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/04/30 12:34 p.m.8 views

CVE-2025-3394 Vulnerability in user management of Automation Builder

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

8.5CVSS7.7AI score0.00066EPSS
Exploits0References1
CVE
CVE
added 2025/04/30 12:34 p.m.46 views

CVE-2025-3394

The CVE-2025-3394 entry affects ABB’s Automation Builder up to version 2.8.0 . The issue is described as an Incorrect Permission Assignment for a Critical Resource in the user management component, enabling modification of project/user data and overruling of user management. The vulnerability is ...

8.5CVSS7.7AI score0.00066EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/06/23 7:15 p.m.11 views

CVE-2023-3394

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

6.8CVSS5.9AI score0.00109EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/06/23 6:12 p.m.9 views

CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

6.8CVSS6.8AI score0.00109EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/06/23 6:12 p.m.12 views

CVE-2023-3394 Session Fixation in fossbilling/fossbilling

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1...

6.8CVSS5.7AI score0.00109EPSS
Exploits1References2
CVE
CVE
added 2023/06/23 6:12 p.m.43 views

CVE-2023-3394

The CVE-2023-3394 entry describes a Session Fixation flaw in FossBilling (fossbilling/fossbilling) prior to version 0.5.1. The root cause is failing to regenerate the session identifier (PHPSESSID) after user authentication, allowing an attacker to fix a session before login and potentially acces...

6.8CVSS5.9AI score0.00109EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/31 12:0 a.m.25 views

RHEL 8 : pki-core:10.6 (RHSA-2023:3394)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3394 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: pki-core: acces...

7.5CVSS7.5AI score0.90688EPSS
Exploits3References6
Cvelist
Cvelist
added 2022/10/25 12:0 a.m.15 views

CVE-2022-3394 WP All Export Pro < 1.7.9 - Authenticated Code Injection

The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform exports to execute arbitrary code on the site. By default only administrators can...

7.5AI score0.01276EPSS
Exploits2References1
CVE
CVE
added 2022/10/25 12:0 a.m.123 views

CVE-2022-3394

Summary: CVE-2022-3394 affects the WP All Export Pro WordPress plugin. The vulnerability exists in versions before 1.7.9 and stems from insufficient access control during exports, where non-admin users with export privileges can trigger arbitrary code execution on the site. The issue is triggered...

7.2CVSS7.3AI score0.01276EPSS
Exploits2References1Affected Software1
OpenVAS
OpenVAS
added 2022/09/27 12:0 a.m.17 views

openSUSE: Security Advisory for permissions (SUSE-SU-2022:3394-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

4.4CVSS4.7AI score0.00031EPSS
Exploits0References2
Rows per page
Query Builder