Lucene search
K

12 matches found

Circl
Circl
added 2026/04/30 7:20 p.m.3 views

CVE-2026-40601

creationtimestamp| type| source ---|---|--- 2026-04-30 19:20:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqdh4eymd2q 2026-04-30 19:49:00+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mkqf2pttnz2b...

7.5CVSS4.8AI score0.00326EPSS
Exploits0References2
NVD
NVD
added 2026/04/30 7:16 p.m.5 views

CVE-2026-40601

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes POST /api/chart/:chartid/query without authentication. The endpoint only checks team.allowReportRefresh and does not verify that the...

7.5CVSS0.00326EPSS
Exploits0References2
OSV
OSV
added 2025/11/20 3:17 p.m.3 views

CVE-2025-40601

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS, which could cause an impacted firewall to crash...

7.5CVSS6.1AI score0.01078EPSS
Exploits0References1
Circl
Circl
added 2025/11/20 2:5 p.m.4 views

CVE-2025-40601

creationtimestamp| type| source ---|---|--- 2025-11-20 14:05:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m62wrmzsxs2n 2025-11-20 15:05:55+00:00| seen| https://threatintel.cc/2025/11/20/new-sonicwall-sonicos-flaw-allows.html 2025-11-20 16:05:47+00:00| seen|...

7.5CVSS7.4AI score0.01078EPSS
Exploits0References19
CVE
CVE
added 2025/11/20 12:26 p.m.41 views

CVE-2025-40601

The CVE-2025-40601 entry affects SonicOS SSLVPN and is characterized by a stack-based buffer overflow in the SSLVPN service that allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) and potentially crash the affected firewall. Public docs identify this as a pre-auth, net...

7.5CVSS7AI score0.01078EPSS
In wildExploits0References1Affected Software1
Circl
Circl
added 2024/07/07 2:57 a.m.3 views

CVE-2024-40601

creationtimestamp| type| source ---|---|--- 2024-07-07 02:57:32+00:00| seen| https://t.me/cvedetector/160...

6.5CVSS4.8AI score0.00163EPSS
Exploits0References1
Circl
Circl
added 2023/09/06 12:18 p.m.2 views

CVE-2023-40601

creationtimestamp| type| source ---|---|--- 2023-09-06 12:18:01+00:00| seen| https://t.me/cibsecurity/69976...

7.1CVSS7.1AI score0.0033EPSS
Exploits0References1
CVE
CVE
added 2023/09/06 8:45 a.m.28 views

CVE-2023-40601

CVE-2023-40601 concerns the WordPress plugin Estatik Mortgage Calculator (<= 2.0.7 in initial sources; Patchstack references

7.1CVSS6.1AI score0.0033EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/08/17 12:0 a.m.15 views

WordPress Mortgage Calculator Estatik Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Mortgage Calculator Estatik Type Plugin Vulnerable versions = 2.0.11 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40601 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID bf1d1cc462db Credits thiennv...

7.1CVSS5.8AI score0.0033EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2023/05/18 12:0 a.m.15 views

LibTIFF Buffer Overflow Vulnerability (CNVD-2023-40601)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A buffer overflow vulnerability exists in LibTIFF version V.4.0.7. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS7.1AI score0.00405EPSS
Exploits1References1
Openbugbounty
Openbugbounty
added 2017/02/01 3:55 a.m.22 views

go-gaytube.com IFRAME Injection vulnerability

Vulnerable URL: http://go-gaytube.com/s.php?search=" XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 40601 VIP website status:| Yes Check go-gaytube.com SSL...

7.3AI score
Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.25 views

CVE-2022-40601

CVE-2022-40601 is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
Exploits0
Rows per page
Query Builder