Lucene search
K

95 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/20 6:27 a.m.2 views

CVE-2017-4168

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.5AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:25 a.m.4 views

CVE-2023-4168

A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifi...

7.5CVSS6.4AI score0.74653EPSS
Exploits4References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:1 a.m.3 views

CVE-2011-4168

Directory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data...

7.5CVSS7AI score0.01608EPSS
Exploits0References1
OSV
OSV
added 2025/05/17 12:0 a.m.5 views

DLA-4168-1 openafs - security update

Bulletin has no description...

8.4CVSS6.6AI score0.00243EPSS
Exploits0
Circl
Circl
added 2025/05/03 3:26 a.m.15 views

CVE-2025-4168

creationtimestamp| type| source ---|---|--- 2025-05-03 03:26:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafeladuj42 2025-05-03 06:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loaob3wc662p 2025-05-03...

6.4CVSS8.7AI score0.00164EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/05/03 1:43 a.m.9 views

CVE-2025-4168 Subpage List <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Subpage List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'subpages' shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00164EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/05/03 1:43 a.m.10 views

CVE-2025-4168 Subpage List <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Subpage List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'subpages' shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00164EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/05/02 8:48 p.m.5 views

WordPress Subpage List plugin <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Subpage List versions = 1.3.3...

6.4CVSS6.8AI score0.00164EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/25 12:0 p.m.16 views

CVE-2024-4168 Tenda 4G300 sub_4260F0 stack-based overflow

A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. This affects the function sub4260F0. The manipulation of the argument upfilen leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of this vulnerability...

9CVSS9AI score0.00473EPSS
Exploits1References4
Circl
Circl
added 2024/02/01 4:11 p.m.2 views

CVE-2013-4168

creationtimestamp| type| source ---|---|--- 2024-02-01 16:11:53+00:00| seen| https://t.me/ctinow/177641...

6.1CVSS6AI score0.00579EPSS
Exploits0References1
0day.today
0day.today
added 2023/08/08 12:0 a.m.357 views

Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure Vulnerability

Exploit Title: Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure Exploit Author: CraCkEr Vendor: Templatecookie Vendor Homepage: https://templatecookie.com/ Software Link: https://templatecookie.com/demo/adlisting-classified-ads-script Version: 2.14.0 Tested on: Windows 10...

7.5CVSS7.1AI score0.74653EPSS
Exploits4
Exploit DB
Exploit DB
added 2023/08/08 12:0 a.m.303 views

Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure

Exploit Title: Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure Exploit Author: CraCkEr Date: 25/07/2023 Vendor: Templatecookie Vendor Homepage: https://templatecookie.com/ Software Link: https://templatecookie.com/demo/adlisting-classified-ads-script Version: 2.14.0 Teste...

7.5CVSS7.6AI score0.74653EPSS
Exploits4
Circl
Circl
added 2023/08/05 10:11 p.m.1 views

CVE-2023-4168

creationtimestamp| type| source ---|---|--- 2023-08-05 22:11:55+00:00| seen| https://t.me/cibsecurity/67817...

7.5CVSS5.1AI score0.74653EPSS
Exploits4References1
CVE
CVE
added 2023/08/05 5:31 p.m.54 views

CVE-2023-4168

CVE-2023-4168 : Information disclosure in Templatecookie Adlisting 2.14.0 due to a flaw in the Redirect Handler’s /ad-list flow. Nuclei template reports that redirect responses expose sensitive data (e.g., API keys, server keys, app IDs) in the body of redirects, allowing remote exploitation. The...

7.5CVSS5.6AI score0.74653EPSS
Exploits4References3Affected Software1
Cvelist
Cvelist
added 2023/08/05 5:31 p.m.13 views

CVE-2023-4168 Templatecookie Adlisting Redirect ad-list information disclosure

A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifi...

4.3CVSS7.6AI score0.74653EPSS
Exploits4References3
Tenable Nessus
Tenable Nessus
added 2023/07/20 12:0 a.m.21 views

RHEL 8 : java-1.8.0-openjdk (RHSA-2023:4168)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4168 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

3.7CVSS6.6AI score0.00141EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.11 views

Debian: Security Advisory (DSA-1310-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.6AI score0.07543EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.19 views

Debian: Security Advisory (DLA-348-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.4AI score0.00579EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/12/30 10:15 p.m.1 views

CVE-2022-4168

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

5.2AI score
Exploits0References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.12 views

Mageia: Security Advisory (MGASA-2014-0277)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.01036EPSS
Exploits0References4
Rows per page
Query Builder