Lucene search
K

140 matches found

Circl
Circl
added 2026/03/09 3:16 a.m.1 views

CVE-2026-3800

creationtimestamp| type| source ---|---|--- 2026-03-09 03:16:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3800...

8.8CVSS5.7AI score0.00048EPSS
Exploits1References1
NVD
NVD
added 2025/11/04 7:15 a.m.2 views

CVE-2025-20749

In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915493; Issue ID: MSV-3800...

6.7CVSS0.00007EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/04 6:20 a.m.4 views

CVE-2025-20749

In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915493; Issue ID: MSV-3800...

0.00007EPSS
Exploits0References1
CVE
CVE
added 2025/11/04 6:20 a.m.8 views

CVE-2025-20749

In MediaTek charger-related CVE-2025-20749, the flaw is an out-of-bounds write caused by a missing bounds check. This can enable local escalation of privilege for an attacker who already has System privileges, with no user interaction required. Affected component is the charger subsystem; the iss...

6.7CVSS6.3AI score0.00007EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 4:6 a.m.7 views

CVE-2023-3800

A vulnerability was found in EasyAdmin8 2.0.2.2. It has been classified as problematic. Affected is an unknown function of the file /admin/index/index.html/admin/mall.goods/index.html of the component File Upload Module. The manipulation leads to unrestricted upload. The complexity of an attack i...

6.6CVSS6.7AI score0.0008EPSS
Exploits0References1
Circl
Circl
added 2025/04/19 12:2 p.m.9 views

CVE-2025-3800

creationtimestamp| type| source ---|---|--- 2025-04-19 12:02:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12582 2025-04-19 12:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln65qe6vql2r 2025-04-19 14:30:25+00:00| published-proof-of-concept|...

9.8CVSS7.3AI score0.00055EPSS
Exploits1References3
CVE
CVE
added 2025/04/19 11:31 a.m.65 views

CVE-2025-3800

CVE-2025-3800 affects WCMS 11, with a SQL injection vulnerability in an unknown functionality of file app/controllers/AnonymousController.php, triggered by manipulating the mobile_phone argument. Attack is remote; exploit has been disclosed publicly. Connected documents corroborate the issue and ...

9.8CVSS7.5AI score0.00055EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/04/19 11:31 a.m.32 views

CVE-2025-3800 WCMS AnonymousController.php sql injection

A vulnerability has been found in WCMS 11 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/controllers/AnonymousController.php. The manipulation of the argument mobilephone leads to sql injection. The attack can be launched remotely. The explo...

7.5CVSS0.00055EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-3800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones...

5.5CVSS6.4AI score0.00074EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/10/10 12:0 a.m.1 views

ZTE ZXR10多款产品 安全漏洞

ZTE ZXR10 1800-2S and others are a wireless router from ZTE Corporation ZTE, China. A security vulnerability exists in various ZTE ZXR10 products, which stems from improper privilege management. The following products and versions are affected: ZTE ZXR10 1800-2S version V4.00.10 and prior version...

6.5CVSS6.8AI score0.00051EPSS
Exploits0References2
CVE
CVE
added 2024/06/28 12:43 p.m.46 views

CVE-2024-3800

CVE-2024-3800 affects sites managed in S@M CMS (Concept Intermedia). The vulnerability is a Reflected XSS caused by including scripts in requested file names. It is reported that only a portion of services is affected, and the root cause has not been fully investigated by the vendor. No exploit d...

6.1CVSS6.3AI score0.00324EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/06/28 12:43 p.m.14 views

CVE-2024-3800 XSS in S@M CMS

Sites managed in S@M CMS Concept Intermedia might be vulnerable to Reflected XSS via including scripts in requested file names. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears...

0.00324EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.25 views

RHEL 6 : glib2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib2: filecopyfallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a...

8.4AI score0.01578EPSS
Exploits4References6
OpenVAS
OpenVAS
added 2024/04/30 12:0 a.m.28 views

Debian: Security Advisory (DLA-3800-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.00775EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2024/04/27 12:0 a.m.18 views

RHEL 7 : rh-git218-git (RHSA-2018:3800)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3800 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...

9.8CVSS7.1AI score0.00557EPSS
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.0 views

Malicious code in wlwz-2312-3800 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26c728b5b5609ba62211b9fad475bb27b3a270ca2a3c59b8a462e3ac784d9131 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/07/26 12:0 a.m.22 views

EulerOS Virtualization 3.0.6.6 : glib2 (EulerOS-SA-2023-2410)

According to the versions of the glib2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privilege...

5.5CVSS6.6AI score0.00074EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/07/25 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2023-2410)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7.6AI score0.00074EPSS
Exploits1References2
CVE
CVE
added 2023/07/20 11:0 p.m.60 views

CVE-2023-3800

CVE-2023-3800 affects EasyAdmin8 2.0.2.2, specifically the File Upload Module. The issue stems from an unknown function in /admin/index/index.html#/admin/mall.goods/index.html that enables unrestricted uploads. Exploitation is described as difficult but the vulnerability is publicly disclosed, wi...

6.6CVSS4.9AI score0.0008EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2023/06/12 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2023-2220)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7.6AI score0.00074EPSS
Exploits1References2
Rows per page
Query Builder