Lucene search
K

81 matches found

Circl
Circl
added 2026/03/19 8:39 a.m.1 views

CVE-2026-4120

creationtimestamp| type| source ---|---|--- 2026-03-19 08:39:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfm2hwnva2v...

6.4CVSS5.7AI score0.00063EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/22 3:22 p.m.2 views

EUVD-2026-4120

The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning and updates. HTTPS is used for communication with the back-end server. Due to usage of the default configuration for the underlying SSL engine, the server...

6.5CVSS5.5AI score0.00007EPSS
Exploits0References4
Circl
Circl
added 2025/04/30 2:13 p.m.8 views

CVE-2025-4120

creationtimestamp| type| source ---|---|--- 2025-04-30 14:13:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14040 2025-04-30 15:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114427698527955636 2025-04-30 16:30:21+00:00|...

9.8CVSS8.1AI score0.01223EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/04/30 2:0 p.m.11 views

CVE-2025-4120 Netgear JWNR2000v2 sub_4238E8 buffer overflow

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been classified as critical. Affected is the function sub4238E8. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but...

9CVSS7AI score0.01223EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2024/12/03 12:0 a.m.14 views

openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 9 for SLE 15 SP5) (SUSE-SU-2024:4120-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00343EPSS
Exploits0References2
Circl
Circl
added 2024/03/09 11:41 a.m.2 views

CVE-2013-4120

creationtimestamp| type| source ---|---|--- 2024-03-09 11:41:49+00:00| seen| https://t.me/ctinow/203898...

7.5CVSS7.1AI score0.00551EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/19 12:0 a.m.10 views

SUSE SLES12 Security Update : slurm (SUSE-SU-2023:4120-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4120-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

7CVSS6.9AI score0.00061EPSS
Exploits0References5
OSV
OSV
added 2023/08/03 9:15 a.m.1 views

CVE-2023-4120

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...

9.8CVSS5.6AI score0.62831EPSS
Exploits1References4
CVE
CVE
added 2023/08/03 9:0 a.m.60 views

CVE-2023-4120

CVE-2023-4120 affects Byzoro Smart S85F Management Platform (versions up to 20230722). The vulnerability is in the processing of the file importhtml.php where manipulation of the sql argument leads to remote command injection. Exploitation is possible remotely and has been publicly disclosed per ...

9.8CVSS7.5AI score0.62831EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/03 9:0 a.m.9 views

CVE-2023-4120 Byzoro Smart S85F Management Platform importhtml.php command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...

6.5CVSS7.3AI score0.62831EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/08/03 9:0 a.m.14 views

CVE-2023-4120 Byzoro Smart S85F Management Platform importhtml.php command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit h...

6.5CVSS10AI score0.62831EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:3 a.m.1 views

SUSE CVE-2016-4120

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...

9.8CVSS8AI score0.05156EPSS
Exploits3References3
Metasploit
Metasploit
added 2023/01/27 7:49 p.m.417 views

Kerberos ticket converter

This module converts tickets to the ccache format from the kirbi format and vice versa. Module Options msf use auxiliary/admin/kerberos/ticketconverter msf auxiliaryticketconverter show actions ...actions... msf auxiliaryticketconverter set ACTION msf auxiliaryticketconverter show options ...show...

7AI score
Exploits0
OSV
OSV
added 2022/12/26 1:15 p.m.0 views

CVE-2022-4120

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize PHP function when CAPTCHA are used as second challenge, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadge...

9.8CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2022/12/26 12:28 p.m.62 views

CVE-2022-4120

The CVE-2022-4120 entry documents a vulnerability in the Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin. Prior to version 2022.6, the plugin passes base64-encoded user input to PHP’s unserialize() when CAPTCHA is used as the second challenge, which can lead to PHP Obj...

9.8CVSS9.7AI score0.06754EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2022/12/26 12:28 p.m.11 views

CVE-2022-4120 Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize PHP function when CAPTCHA are used as second challenge, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadge...

9.8AI score0.06754EPSS
Exploits2References1
ALT Linux
ALT Linux
added 2022/04/26 12:0 a.m.31 views

Security fix for the ALT Linux 10 package snapd version 2.54.3-alt1

2.54.3-alt1 built April 26, 2022 Andrey Cherepanov in task 299035 --- Feb. 20, 2022 Alexey Shabalin - 2.54.3 Fixes: CVE-2021-44730, CVE-2021-44731, CVE-2021-4120...

6.9CVSS3AI score0.01065EPSS
Exploits5
OSV
OSV
added 2022/02/24 1:23 p.m.2 views

USN-5292-4 snapd regression

USN-5292-1 fixed a vulnerability in snapd. Unfortunately that update introduced a regression that could break the fish shell. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Troup discovered that snap did not properly manage the permissions for...

6.1AI score
Exploits0References3
Ubuntu
Ubuntu
added 2022/02/24 1:23 p.m.107 views

USN-5292-4: snapd regression

USN-5292-1 fixed a vulnerability in snapd. Unfortunately that update introduced a regression that could break the fish shell. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Troup discovered that snap did not properly manage the permissions for...

7.5AI score
Exploits0References2
OpenVAS
OpenVAS
added 2022/02/19 12:0 a.m.21 views

Ubuntu: Security Advisory (USN-5292-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.01065EPSS
Exploits5References2
Rows per page
Query Builder