Lucene search
K

160 matches found

Circl
Circl
added 2026/05/06 8:33 p.m.3 views

CVE-2026-4024

creationtimestamp| type| source ---|---|--- 2026-05-06 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml7kd4zsiu2u...

5.3CVSS5.8AI score0.00027EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:0 a.m.4 views

Oracle Linux 8 : postgresql:13 (ELSA-2026-4024)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-4024 advisory. - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Resolves: RHEL-128818 CVE-2025-12818 - Fix CVE-2025-1094 - Fixes: CVE-2024-10976 CVE-2024-10978...

8.8CVSS7AI score0.82364EPSS
Exploits14References4
EUVD
EUVD
added 2026/01/22 4:51 p.m.2 views

EUVD-2026-4024

Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows Privilege Escalation.This issue affects Lawyer Directory: from n/a through = 1.3.3...

5.4AI score0.00025EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.4 views

MiracleLinux 9 : container-tools, python-podman-4.2.0-1.el9, toolbox-0.0.99.3-5.el9 (AXSA:2023-5056:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5056:01 advisory. golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension CVE-2020-28851 golang.org/x/text: Panic in...

7.5CVSS7.3AI score0.01026EPSS
Exploits12References17
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-4024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versio...

8.8CVSS5.7AI score0.00886EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 11:24 p.m.17 views

CVE-2022-4024

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users along with their posts...

6.5CVSS6.4AI score0.00321EPSS
Exploits2References1
NVD
NVD
added 2025/04/28 3:15 p.m.13 views

CVE-2025-4024

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /adddrive.php. The manipulation of the argument drivetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS0.00204EPSS
Exploits1References5
Circl
Circl
added 2025/04/28 3:10 p.m.5 views

CVE-2025-4024

creationtimestamp| type| source ---|---|--- 2025-04-28 15:10:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13690 2025-04-28 17:45:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvczmsofe2a 2025-04-28 19:55:12+00:00| seen|...

9.8CVSS7.3AI score0.00204EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/04/28 2:31 p.m.11 views

CVE-2025-4024 itsourcecode Placement Management System add_drive.php sql injection

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /adddrive.php. The manipulation of the argument drivetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS0.00204EPSS
Exploits1References5
CVE
CVE
added 2025/04/28 2:31 p.m.52 views

CVE-2025-4024

CVE-2025-4024 affects itsourcecode Placement Management System 1.0. The vulnerable component is the /add_drive.php file, where manipulation of the drive_title parameter leads to an SQL injection. The vulnerability can be exploited remotely and an exploit has been disclosed publicly. Other paramet...

9.8CVSS7.6AI score0.00204EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/28 2:31 p.m.10 views

CVE-2025-4024 itsourcecode Placement Management System add_drive.php sql injection

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /adddrive.php. The manipulation of the argument drivetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS7.6AI score0.00204EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2015-4024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Algorithmic complexity vulnerability in the multipartbufferheaders function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...

5CVSS7.2AI score0.69613EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2024/11/26 6:52 a.m.27 views

Moderate: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS6.7AI score0.01561EPSS
Exploits2References4
AlmaLinux
AlmaLinux
added 2024/11/26 12:0 a.m.23 views

Moderate: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2021-33198 podman: podman machine spawns gvproxy...

7.5CVSS7.2AI score0.01561EPSS
Exploits2References8
Circl
Circl
added 2024/08/17 10:37 a.m.2 views

CVE-2023-4024

creationtimestamp| type| source ---|---|--- 2024-08-17 10:37:29+00:00| seen| https://t.me/cvedetector/3385 2024-08-17 14:01:04+00:00| seen| https://t.me/CveExploits/13...

5.3CVSS4.8AI score0.00239EPSS
Exploits0References2
OSV
OSV
added 2024/08/17 8:15 a.m.0 views

CVE-2023-4024

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteplayer function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances...

5.3CVSS5.8AI score
Exploits0References4
Cvelist
Cvelist
added 2024/08/17 7:34 a.m.19 views

CVE-2023-4024 Radio Player <= 2.0.73 - Missing Authorization to Player Deletion

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteplayer function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances...

5.3CVSS0.00239EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/08/17 7:34 a.m.10 views

CVE-2023-4024 Radio Player <= 2.0.73 - Missing Authorization to Player Deletion

The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteplayer function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to delete player instances...

5.3CVSS5.2AI score0.00239EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2024/04/25 2:15 p.m.21 views

CVE-2024-4024

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker with their Bitbucket account credentials may be able to take...

8.8CVSS5.8AI score0.00886EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/04/25 1:30 p.m.21 views

CVE-2024-4024 Authentication Bypass by Assumed-Immutable Data in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker with their Bitbucket account credentials may be able to take...

7.3CVSS7.1AI score0.00886EPSS
Exploits1References1
Rows per page
Query Builder