Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:16 a.m.27 views

CVE-2025-40555

A vulnerability has been identified in APOGEE PXC+TALON TC Series BACnet All versions. Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially...

5.3CVSS6.7AI score0.00179EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-40555 Malicious code in ymockup (npm)

The package ymockup was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 9:0 a.m.4 views

CVE-2024-40555

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability...

5.3CVSS7.8AI score0.00278EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:45 p.m.6 views

CVE-2021-40555

Cross site scripting XSS vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form...

5.4CVSS6.4AI score0.00439EPSS
Exploits1
Circl
Circl
added 2025/05/13 10:30 a.m.38 views

CVE-2025-40555

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16107 2025-05-13 10:52:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp2cxhemn42h 2025-05-15 10:00:00+00:00| seen|...

5.3CVSS4.8AI score0.00179EPSS
Exploits0References3
CVE
CVE
added 2025/05/13 9:38 a.m.40 views

CVE-2025-40555

CVE-2025-40555 affects the APOGEE PXC+TALON TC Series (BACnet). After processing a specific BACnet createObject request, affected devices may start sending unsolicited BACnet broadcast messages, which can enable a same-network attacker to induce a partial denial of service and reduce network avai...

5.3CVSS6.9AI score0.00179EPSS
Exploits0References1
Circl
Circl
added 2024/07/15 7:21 p.m.2 views

CVE-2024-40555

creationtimestamp| type| source ---|---|--- 2024-07-15 19:21:24+00:00| seen| https://t.me/cvedetector/877...

5.3CVSS4.8AI score0.00278EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/15 12:0 a.m.18 views

CVE-2024-40555

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability...

0.00278EPSS
Exploits0References1
Circl
Circl
added 2023/12/20 3:23 p.m.4 views

CVE-2023-40555

creationtimestamp| type| source ---|---|--- 2023-12-20 15:23:25+00:00| seen| https://t.me/ctinow/157077 2024-01-13 14:51:37+00:00| seen| https://t.me/ctinow/167840 2024-11-17 03:13:55+00:00| published-proof-of-concept| https://t.me/codeb0ss/1280...

9.8CVSS8.7AI score0.0049EPSS
Exploits0References3
NVD
NVD
added 2023/12/20 2:15 p.m.20 views

CVE-2023-40555

Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5...

9.8CVSS0.0049EPSS
Exploits0References1
CVE
CVE
added 2023/12/20 1:45 p.m.176 views

CVE-2023-40555

CVE-2023-40555 affects Flatsome theme for WordPress (<= 3.17.5). The vulnerability is a Deserialization of Untrusted Data issue leading to unauthenticated PHP Object Injection via deserialization of untrusted input in the Flatsome codebase. CVSS v3.1 metrics from NVD indicate a CRITICAL impact...

9.8CVSS8.6AI score0.0049EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/09/06 12:0 a.m.21 views

WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection

Software Flatsome Type Theme Vulnerable versions = 3.17.5 Fixed in 3.17.6 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-40555 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID 0472344ea36e Credits Rafie Muhammad Patchstack Required privilege...

9.8CVSS7.2AI score0.0049EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/02/16 6:12 p.m.2 views

CVE-2021-40555

creationtimestamp| type| source ---|---|--- 2023-02-16 18:12:28+00:00| seen| https://t.me/cibsecurity/58323 2025-03-19 15:17:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8060...

5.4CVSS5.5AI score0.00439EPSS
Exploits1References2
OSV
OSV
added 2023/02/16 4:15 p.m.16 views

CVE-2021-40555

Cross site scripting XSS vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form...

5.4CVSS5.6AI score
Exploits0References1
Cvelist
Cvelist
added 2023/02/16 12:0 a.m.13 views

CVE-2021-40555

Cross site scripting XSS vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form...

5.7AI score0.00439EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/02/16 12:0 a.m.6 views

CVE-2021-40555

Cross site scripting XSS vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form...

5.6AI score0.00439EPSS
Exploits1References1
CVE
CVE
added 2023/02/16 12:0 a.m.40 views

CVE-2021-40555

CVE-2021-40555 is an XSS vulnerability in flatCore-CMS 2.2.15, allowing an attacker to execute arbitrary code via the description field on the new page creation form. Document set confirms the affected software and the vulnerable component (description field handling on page creation). Exploit de...

5.4CVSS5.5AI score0.00439EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.10 views

CVE-2022-40555

...

Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.27 views

CVE-2022-40555

CVE-2022-40555 is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
Exploits0
Rows per page
Query Builder