Lucene search
+L

68 matches found

Circl
Circl
•added 2026/07/09 2:57 p.m.•22 views

CVE-2026-4275

creationtimestamp| type| source ---|---|--- 2026-07-09 14:57:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7vgdjneg26 2026-07-10 00:00:27+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqatqsu5rv2o...

8.8CVSS5.8AI score0.00294EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/08 4:44 p.m.•16 views

MINI-4275-5HCC-3WRP

Bulletin has no description...

9.1CVSS6.1AI score0.00716EPSS
SaveExploits0
OSV
OSV
•added 2026/06/04 9:35 a.m.•15 views

MINI-4275-H5QQ-H2RX

Bulletin has no description...

5.3CVSS6.7AI score0.0057EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/09 11:57 a.m.•19 views

CVE-2018-4275

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1...

8.6CVSS7.8AI score0.00669EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/11 12:25 a.m.•55 views

CVE-2025-4275 SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate

A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...

7.8CVSS0.00466EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/11 12:25 a.m.•8 views

CVE-2025-4275 SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate

A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...

7.8CVSS9.6AI score0.00466EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/11 12:25 a.m.•135 views

CVE-2025-4275

CVE-2025-4275 affects InsydeH2O UEFI firmware/applications. Root cause: unsafe handling of an NVRAM variable used to store signing certificates, enabling a attacker to inject their own certificate and bypass Secure Boot. Impact: execution of unsigned or malicious UEFI code before OS load, potenti...

7.8CVSS9.6AI score0.00466EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/11 12:00 a.m.•3 views

CVE-2025-4275: Undefined Security Weakness

A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...

7.8CVSS8.5AI score0.00466EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/14 3:43 p.m.•34 views

CVE-2024-4275

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Interactive Circle widget in all versions up to, and including, 5.9.19 due to insufficient input sanitization and...

6.4CVSS5.9AI score0.0034EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/10 7:33 a.m.•20 views

CVE-2024-4275 Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Interactive Circle widget in all versions up to, and including, 5.9.19 due to insufficient input sanitization and...

6.4CVSS5.8AI score0.0034EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/10 7:33 a.m.•144 views

CVE-2024-4275

CVE-2024-4275 affects the WordPress plugin Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders. The Stored XSS vulnerability is in the Interactive Circle widget due to insufficient input sanitization and output escaping on user-supplied attributes, allo...

6.4CVSS5.7AI score0.0034EPSS
SaveExploits0References2Affected Software1
Circl
Circl
•added 2024/02/13 1:02 p.m.•18 views

CVE-2013-4275

creationtimestamp| type| source ---|---|--- 2024-02-13 13:02:04+00:00| seen| https://t.me/ctinow/183782...

5.4CVSS5.5AI score0.01037EPSS
SaveExploits1References1
Circl
Circl
•added 2022/12/22 12:13 a.m.•16 views

CVE-2021-4275

creationtimestamp| type| source ---|---|--- 2022-12-22 00:13:16+00:00| seen| https://t.me/cibsecurity/55096 2025-04-14 17:54:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11675...

8.8CVSS8.1AI score0.00242EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/21 12:00 a.m.•6 views

CVE-2021-4275 katlings pyambic-pentameter cross-site request forgery

A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is 974f21aa1b2527ef39c8afe1a5060548217deca8. I...

4.3CVSS7.1AI score0.00242EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/21 12:00 a.m.•69 views

CVE-2021-4275

CVE-2021-4275 concerns katlings pyambic-pentameter, with a cross-site request forgery flaw affecting an unknown function. It can be triggered remotely; a patch is identified as 974f21aa1b2527ef39c8afe1a5060548217deca8. Public details in the provided documents do not specify affected versions or e...

8.8CVSS6.4AI score0.00242EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/03 12:00 a.m.•12 views

CVE-2022-4275 House Rental System POST Request search-property.php sql injection

A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument searchproperty leads to sql injection. The attack ca...

6.3CVSS10AI score0.00671EPSS
SaveExploits1References2
CVE
CVE
•added 2022/12/03 12:00 a.m.•79 views

CVE-2022-4275

CVE-2022-4275 affects House Rental System. The vulnerability is in the POST Request Handler, specifically the unknown functionality in the file search-property.php where manipulation of the search_property argument leads to a SQL injection. It can be exploited remotely, and public disclosures exi...

9.8CVSS8.4AI score0.00671EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
•added 2022/11/30 12:00 a.m.•42 views

SUSE: Security Advisory (SUSE-SU-2022:4275-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.02653EPSS
SaveExploits1References5
CVE
CVE
•added 2022/08/04 1:54 p.m.•52 views

CVE-2020-4275

CVE-2020-4275: Cross-site scripting in the Carbon Black Response add-on for IBM QRadar SIEM. Affects Carbon Black Response versions 1.0.1–1.3.0. The vulnerability allows injecting arbitrary JavaScript into the Web UI, potentially leaking credentials within a trusted session. Root cause: improper ...

7.2AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2020/07/07 4:57 p.m.•20 views

Security Bulletin: Carbon Black Response application add on to IBM QRadar SIEM is vulnerable to cross site scripting (CVE-2020-4275)

Summary Carbon Black Response application add on to IBM QRadar SIEM is vulnerable to cross site scripting. Vulnerability Details CVEID: CVE-2020-4275 DESCRIPTION: IBM QRadar SIEM s vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI...

1.5AI score
SaveExploits0Affected Software1
Rows per page
Query Builder