Lucene search
K

92 matches found

Circl
Circl
added 2025/12/26 12:27 a.m.1 views

CVE-2008-4251

creationtimestamp| type| source ---|---|--- 2025-12-26 00:27:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3matzuukeyk2c...

5.8AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:32 a.m.7 views

CVE-2022-4251

A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionality of the file editBooking.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publ...

5.4CVSS6.2AI score0.00182EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/06 10:20 p.m.13 views

CVE-2025-4251

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component RMDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may ...

9.8CVSS7.2AI score0.00649EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2013-4251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories. CVE-2013-4251 Note that Nessus relies on the presence of the package as...

7.8CVSS7.1AI score0.00086EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.21 views

RHEL 6 : scipy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - scipy: weave /tmp and current directory issues CVE-2013-4251 Note that Nessus has not tested for this issue but has...

7.8CVSS7.7AI score0.00086EPSS
Exploits0References1
OSV
OSV
added 2024/04/27 1:15 p.m.0 views

CVE-2024-4251

A vulnerability was found in Tenda i21 1.0.0.144656. It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSe. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buff...

8.8CVSS6.4AI score
Exploits0References4
CVE
CVE
added 2024/04/27 1:0 p.m.51 views

CVE-2024-4251

CVE-2024-4251 affects Tenda i21 1.0.0.14(4656). The flaw is in the function fromDhcpSetSer of the file /goform/DhcpSetSe, where manipulation of the arguments dhcpStartIp, dhcpEndIp, dhcpGw, dhcpMask, dhcpLeaseTime, dhcpDns1, and dhcpDns2 leads to a stack-based buffer overflow. Impact is described...

9CVSS6.8AI score0.00147EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2024/04/27 1:0 p.m.14 views

CVE-2024-4251 Tenda i21 DhcpSetSe fromDhcpSetSer stack-based overflow

A vulnerability was found in Tenda i21 1.0.0.144656. It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSe. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buff...

9CVSS8.9AI score0.00147EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.9 views

openSUSE: Security Advisory for vorbis (SUSE-SU-2023:4251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.00028EPSS
Exploits1References2
Circl
Circl
added 2024/02/04 8:6 a.m.0 views

CVE-2013-4251

creationtimestamp| type| source ---|---|--- 2024-02-04 08:06:53+00:00| seen| https://t.me/ctinow/178710...

7.8CVSS7.4AI score0.00086EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/31 1:54 p.m.12 views

CVE-2023-4251 EventPrime < 3.2.0 - Booking Creation via CSRF

The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks...

4.9AI score0.0014EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2023/10/31 1:54 p.m.6 views

CVE-2023-4251 EventPrime < 3.2.0 - Booking Creation via CSRF

The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks...

7AI score0.0014EPSS
Exploits2References1
Patchstack
Patchstack
added 2023/10/31 12:0 a.m.10 views

WordPress EventPrime Plugin < 3.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software EventPrime Type Plugin Vulnerable versions 3.2.0 Fixed in 3.2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4251 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3fee28172b5f Credits Alex Sanford Required...

4.3CVSS7AI score0.0014EPSS
Exploits2References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:36 a.m.1 views

SUSE CVE-2013-4251

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...

7.8CVSS7.6AI score0.00086EPSS
Exploits0References3
Circl
Circl
added 2022/12/19 12:41 a.m.0 views

CVE-2021-4251

creationtimestamp| type| source ---|---|--- 2022-12-19 00:41:10+00:00| seen| https://t.me/cibsecurity/54831...

6.1CVSS6.1AI score0.00211EPSS
Exploits0References1
CVE
CVE
added 2022/12/18 12:0 a.m.54 views

CVE-2021-4251

CVE-2021-4251 is associated with the vulnerable function getFullURL in the file include.cdn.php of the as CMS. The issue arises from input manipulation that enables cross-site scripting (XSS). The vulnerability can be triggered remotely; the combined CVSS details in the records indicate low to mo...

6.1CVSS4.8AI score0.00211EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/12/01 12:0 a.m.43 views

CVE-2022-4251

Movie Ticket Booking System (editBooking.php) is affected by a cross-site scripting vulnerability. The issue arises from a problem in some unknown functionality of editBooking.php, enabling remote exploitation and with exploits already disclosed publicly. The available sources do not specify affe...

5.4CVSS4.3AI score0.00182EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/08/04 12:55 p.m.26 views

CVE-2019-4251

CVE-2019-4251 is an IBM Rational Quality Manager cross-site scripting vulnerability affecting RQM 6.0–6.0.6.1. An attacker could embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Remediation for 6.0.x is to upgrade to 6.0.6.1 iFix004...

7.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.49 views

AlmaLinux 8 : openjpeg2 (ALSA-2021:4251)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4251 advisory. - In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opjt1encodecblks function openjp2/t1.c. Remote attackers could leverage this...

8.8CVSS7.4AI score0.00924EPSS
Exploits5References15
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2013-0330)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00086EPSS
Exploits0References4
Rows per page
Query Builder