Lucene search
K

48 matches found

Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.0 views

CVE-2026-39653 WordPress Video Conferencing with Zoom plugin <= 4.6.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Conferencing with Zoom: from n/a through = 4.6.6...

4.3CVSS5.8AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-5702

Malware in sbrugna...

9.8CVSS9.1AI score0.00597EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-30483

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00178EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-19862

Malicious code in bioql PyPI...

7.5CVSS8.1AI score0.00211EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-14532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in The Sleuth Kit TSK 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash...

9.8CVSS7.3AI score0.00597EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 10:18 a.m.3 views

CVE-2024-32696

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud Infographic Maker – iList allows Stored XSS.This issue affects Infographic Maker – iList: from n/a through 4.6.6...

6.5CVSS5.2AI score0.00178EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:57 a.m.6 views

CVE-2023-3520

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6...

4.6CVSS6.8AI score0.00047EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2024/05/27 12:0 a.m.2 views

PT-2024-22704 · Unknown · Mosp Kintai Kanri

Name of the Vulnerable Software and Affected Versions: MosP kintai kanri versions 4.6.6 and earlier Description: The issue is related to incorrect permission assignment for a critical resource, which may allow a remote unauthenticated attacker with access to the product to alter the product...

7.5CVSS7.1AI score0.0021EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/27 12:0 a.m.1 views

PT-2024-22624 · Unknown · Mosp Kintai Kanri

Name of the Vulnerable Software and Affected Versions: MosP kintai kanri versions 4.6.6 and earlier Description: The issue allows a remote attacker who can log in to the product to obtain sensitive information. This is due to a path traversal vulnerability. Recommendations: For versions 4.6.6 and...

6.5CVSS6.8AI score0.00097EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/05/27 12:0 a.m.1 views

esMind MosP 安全漏洞

esMind MosP is an open source attendance management system from esMind. A security vulnerability exists in esMind MosP kintai kanri 4.6.6 and earlier versions, which stems from the presence of path traversal and allows remote attackers to obtain sensitive information about the product...

6.5CVSS6.4AI score0.00097EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/27 12:0 a.m.21 views

RHEL 7 : CloudForms 4.6.6 (RHSA-2018:3816)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3816 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...

8.8CVSS6.8AI score0.81248EPSS
Exploits1References71
Patchstack
Patchstack
added 2024/04/19 12:0 a.m.6 views

WordPress Infographic Maker – iList Plugin <= 4.6.6 is vulnerable to Cross Site Scripting (XSS)

Software Infographic Maker – iList Type Plugin Vulnerable versions = 4.6.6 Fixed in 4.6.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32696 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID baa0cb27dbc1 Credits Khalid Yusuf Required...

6.5CVSS6.6AI score0.00178EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/01/31 5:15 p.m.0 views

CVE-2024-22302

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ignazio Scimone Albo Pretorio On line allows Stored XSS.This issue affects Albo Pretorio On line: from n/a through 4.6.6...

5.4CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2024/01/31 5:15 p.m.16 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ignazio Scimone Albo Pretorio On line allows Stored XSS.This issue affects Albo Pretorio On line: from n/a through 4.6.6...

4.9CVSS6.9AI score0.00077EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 4:55 p.m.7 views

CVE-2024-22302 WordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ignazio Scimone Albo Pretorio On line allows Stored XSS.This issue affects Albo Pretorio On line: from n/a through 4.6.6...

6.5CVSS6.4AI score0.00077EPSS
Exploits0References1
OSV
OSV
added 2024/01/24 12:15 p.m.0 views

CVE-2024-22301

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ignazio Scimone Albo Pretorio On line.This issue affects Albo Pretorio On line: from n/a through 4.6.6...

7.5CVSS7.3AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/01/24 12:0 a.m.2 views

PT-2024-19323 · Unknown · Albo Pretorio On Line

Name of the Vulnerable Software and Affected Versions: Albo Pretorio On line versions n/a through 4.6.6 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have...

7.5CVSS9.2AI score0.00211EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/01/24 12:0 a.m.2 views

WordPress plugin Albo Pretorio On line Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

7.5CVSS6.2AI score0.00211EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/07/06 12:0 a.m.2 views

PT-2023-25193 · Unknown · Openitcockpit

Name of the Vulnerable Software and Affected Versions: openitcockpit versions prior to 4.6.6 Description: The issue concerns a sensitive cookie in an HTTPS session that lacks the 'Secure' attribute. This could potentially allow unauthorized access to sensitive information. Recommendations: For...

4.6CVSS4.4AI score0.00047EPSS
Exploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/28 8:12 p.m.15 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow (CVE-2023-25659)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow , caused by an out-of-bounds read when the indices parameter in DynamicStitch does not match the data parameter CVE-2023-25659. TensorFlow is included as part of the runtimes...

7.5CVSS8.1AI score0.00204EPSS
Exploits0Affected Software1
Rows per page
Query Builder