Lucene search
+L

22 matches found

Circl
Circl
added 2025/12/12 4:10 p.m.7 views

CVE-2025-36745

creationtimestamp| type| source ---|---|--- 2025-12-12 16:10:25+00:00| seen| https://gist.github.com/Darkcrai86/88c704c23fac52fefc5b106e50aeda6d 2025-12-12 16:58:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115707654519020548 2025-12-12 17:06:21+00:00| seen|...

7.8CVSS5.8AI score0.00197EPSS
SaveExploits0References4
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-36745 Malicious code in testtest--testq (npm)

The package testtest--testq was found to contain malicious code...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:37 p.m.11 views

CVE-2020-36745

The WP Project Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.0. This is due to missing or incorrect nonce validation on the doupdates function. This makes it possible for unauthenticated attackers to trigger updates via a forged...

8.8CVSS6.5AI score0.0044EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/06 5:16 p.m.33 views

CVE-2024-36745

An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...

0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/06 5:16 p.m.62 views

CVE-2024-36745

CVE-2024-36745 affects OneFlow-Inc Oneflow v0.9.1. The issue allows an attacker to cause a Denial of Service by inputting a negative value into the oneflow.index_select parameter. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no privileges required, user interaction NONE. Multiple source...

7.5CVSS7AI score0.00418EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/05/24 12:0 a.m.4 views

VulnCheck KEV: CVE-2023-36745

Microsoft Exchange Server Remote Code Execution Vulnerability...

8CVSS7.4AI score0.81138EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/12 5:15 p.m.24 views

CVE-2023-36745

Microsoft Exchange Server Remote Code Execution Vulnerability...

8CVSS7.9AI score0.81138EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/09/12 4:58 p.m.12 views

CVE-2023-36745 Microsoft Exchange Server Remote Code Execution Vulnerability

...

8CVSS7.8AI score0.81138EPSS
SaveExploits1References1
CVE
CVE
added 2023/09/12 4:58 p.m.270 views

CVE-2023-36745

CVE-2023-36745 is a Microsoft Exchange Server Remote Code Execution vulnerability. Connected sources provide concrete exploit details: a GitHub repo labeled as a CVE-2023-36745 exploit (Deserialization of Untrusted Data in Microsoft), with a PoC and example commands to trigger RCE (PowerShell/DLL...

8CVSS7.9AI score0.81138EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/09/12 4:58 p.m.40 views

CVE-2023-36745 Microsoft Exchange Server Remote Code Execution Vulnerability

...

8CVSS8.1AI score0.81138EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2023/09/12 12:0 a.m.61 views

Security Updates for Microsoft Exchange Server (September 2023)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Sep, 2023 security bulletin. - Microsoft Exchange Server Spoofing Vulnerability CVE-2023-36757 - Microsoft Exchange Server Remote Co...

8CVSS7.1AI score0.81713EPSS
SaveExploits1References5
CVE
CVE
added 2023/07/01 4:26 a.m.36 views

CVE-2020-36745

The CVE concerns the WP Project Manager WordPress plugin, affected versions up to and including 2.4.0. The root cause is missing or incorrect nonce validation in the do_updates() function, facilitating Cross-Site Request Forgery. This allows unauthenticated attackers to trigger updates by deliver...

8.8CVSS8.2AI score0.0044EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2023/07/01 4:26 a.m.22 views

CVE-2020-36745 WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass

The WP Project Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.0. This is due to missing or incorrect nonce validation on the doupdates function. This makes it possible for unauthenticated attackers to trigger updates via a forged...

4.3CVSS8.4AI score0.0044EPSS
SaveExploits0References9
Circl
Circl
added 2022/08/31 2:36 a.m.8 views

CVE-2022-36745

creationtimestamp| type| source ---|---|--- 2022-08-31 02:36:02+00:00| seen| https://t.me/cibsecurity/49086...

6.1CVSS6AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/30 10:15 p.m.19 views

CVE-2022-36745

LibreNMS v22.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component print-customoid.php...

6.1CVSS0.00421EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/30 9:27 p.m.69 views

CVE-2022-36745

CVE-2022-36745 affects LibreNMS v22.6.0, with a cross-site scripting (XSS) vulnerability in the component print-customoid.php. The root cause is an XSS flaw in that PHP component, enabling user-initiated script execution under certain conditions. Documents consistently describe the issue as a vul...

6.1CVSS6AI score0.00421EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/08/30 9:27 p.m.14 views

CVE-2022-36745

LibreNMS v22.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component print-customoid.php...

6.1CVSS6.1AI score0.00421EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/08/30 9:27 p.m.21 views

CVE-2022-36745

LibreNMS v22.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component print-customoid.php...

6.2AI score0.00421EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/10/22 12:0 a.m.57 views

Trend Micro ServerProtect Authentication Bypass Vulnerability (CVE-2021-36745)

Binary data trendmicroserverprotectcve-2021-36745.nbin...

10CVSS9.7AI score0.0931EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/09/29 11:15 a.m.4 views

CVE-2021-36745

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations...

10CVSS7.2AI score0.0931EPSS
SaveExploits0References4Affected Software4
Rows per page
Query Builder