Lucene search
+L

18 matches found

Circl
Circl
•added 2026/04/22 8:31 a.m.•17 views

CVE-2026-41665

creationtimestamp| type| source ---|---|--- 2026-04-22 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33id3frp2o...

6.1CVSS5.8AI score0.00141EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:04 a.m.•21 views

CVE-2024-41665

Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting XSS vulnerability in versions prior to 6.6.0. This vulnerability exists in the "Playlists - Democratic - Configure Democratic Playlist" feature. An attacker with Content Manager permissions...

5.5CVSS5.5AI score0.0046EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/10 4:05 a.m.•10 views

EUVD-2025-41665

Malicious code in arif-ketoprak12-sluey npm...

6.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2024-41665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting XSS vulnerability in versions prior to 6.6.0. This...

5.5CVSS5.3AI score0.0046EPSS
SaveExploits1References2
Circl
Circl
•added 2025/07/08 7:11 a.m.•22 views

CVE-2025-41665

creationtimestamp| type| source ---|---|--- 2025-07-08 07:11:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816362788303261 2025-07-08 07:11:10+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqovnswf72 2025-07-08 09:42:38+00:00| seen|...

6.5CVSS4.8AI score0.00361EPSS
SaveExploits0References3
CVE
CVE
•added 2025/07/08 7:03 a.m.•48 views

CVE-2025-41665

CVE-2025-41665 affects Phoenix Contact PLCs (e.g., AXC F 1152 and related controllers) due to incorrect default permissions on a configuration file. A low-privileged remote attacker can force the watchdog to reboot the PLC, causing a denial of service. The vulnerability is documented with a CVSS ...

6.5CVSS6.6AI score0.00361EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/08 7:03 a.m.•10 views

CVE-2025-41665 Phoenix Contact: DoS of the PLC due to incorrect default permissions possible

An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file...

6.5CVSS7.2AI score0.00361EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:17 a.m.•25 views

CVE-2023-41665

Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0...

8.8CVSS6.9AI score0.00794EPSS
SaveExploits0
Circl
Circl
•added 2024/07/23 8:34 p.m.•19 views

CVE-2024-41665

creationtimestamp| type| source ---|---|--- 2024-07-23 20:34:56+00:00| seen| https://t.me/cvedetector/1521...

5.5CVSS4.8AI score0.0046EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/17 7:15 a.m.•18 views

CVE-2023-41665

Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0...

8.8CVSS5.8AI score0.00794EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/17 7:15 a.m.•35 views

CVE-2023-41665

Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0...

8.8CVSS8.8AI score0.00794EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/17 6:53 a.m.•50 views

CVE-2023-41665 WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability

Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0...

8.8CVSS8.8AI score0.00794EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/17 6:53 a.m.•107 views

CVE-2023-41665

CVE-2023-41665 is a WordPress GiveWP plugin vulnerability: Privilege Escalation due to improper/insufficient privilege checks for updating default roles, enabling an authenticated Give Manager to elevate privileges up to administrator. Affected versions: GiveWP

8.8CVSS6.8AI score0.00794EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2023/09/04 12:00 a.m.•26 views

WordPress GiveWP Plugin <= 2.33.0 is vulnerable to Privilege Escalation

Software GiveWP Type Plugin Vulnerable versions = 2.33.0 Fixed in 2.33.1 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-41665 Patch priority High CVSS severity High 7.2 Developer Liquid Web / StellarWP PSID db573163f3a2 Credits Rafie...

8.8CVSS6.5AI score0.00794EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/05/09 12:00 a.m.•37 views

Siemens SICAM P850 and P855 Devices Improper Neutralization of Parameter/Argument Delimiters (CVE-2022-41665)

A vulnerability has been identified in SICAM P850 All versions V3.10, SICAM P855 All versions V3.10. Affected devices do not properly validate the parameter of a specific GET request. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the...

9.8CVSS8.2AI score0.01414EPSS
SaveExploits0References3
Circl
Circl
•added 2022/10/11 2:25 p.m.•24 views

CVE-2022-41665

creationtimestamp| type| source ---|---|--- 2022-10-11 14:25:52+00:00| seen| https://t.me/cibsecurity/51102...

9.8CVSS8.6AI score0.01414EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/10/11 12:00 a.m.•12 views

CVE-2022-41665

A vulnerability has been identified in SICAM P850 7KG8500-0AA00-0AA0 All versions V3.10, SICAM P850 7KG8500-0AA00-2AA0 All versions V3.10, SICAM P850 7KG8500-0AA10-0AA0 All versions V3.10, SICAM P850 7KG8500-0AA10-2AA0 All versions V3.10, SICAM P850 7KG8500-0AA30-0AA0 All versions V3.10, SICAM P8...

9.8CVSS8.6AI score0.01414EPSS
SaveExploits0References3
CVE
CVE
•added 2022/10/11 12:00 a.m.•112 views

CVE-2022-41665

CVE-2022-41665 affects Siemens SICAM P850 and P855 devices (all listed SKUs) with versions prior to v3.10. The vulnerability stems from improper validation of a parameter in a specific GET request, which could allow an unauthenticated attacker to set the device to a denial-of-service state or to ...

9.8CVSS9.1AI score0.01414EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder