Lucene search
K

89 matches found

OSV
OSV
added yesterday3 views

MINI-P5V3-G36F-4357

Bulletin has no description...

5.3CVSS6.7AI score0.00017EPSS
Exploits0
EUVD
EUVD
added 2026/01/23 2:28 p.m.3 views

EUVD-2026-4357

Missing Authorization vulnerability in sumup SumUp Payment Gateway For WooCommerce sumup-payment-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SumUp Payment Gateway For WooCommerce: from n/a through = 2.7.9...

5.4AI score0.00077EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:56 a.m.5 views

CVE-2018-4357

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10...

9.3CVSS6.5AI score0.00171EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:50 a.m.5 views

CVE-2009-4357

CQWeb aka the web interface in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors...

5CVSS6.8AI score0.00337EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/11/02 12:0 a.m.7 views

Debian dla-4357 : ruby-rack - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4357 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4357-1 [email protected]...

7.5CVSS6.7AI score0.00808EPSS
Exploits0References18
OSV
OSV
added 2025/11/01 12:0 a.m.3 views

DLA-4357-1 ruby-rack - security update

Bulletin has no description...

7.5CVSS7AI score0.00808EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-0071

Malware in sbrugna...

4.3CVSS6.4AI score0.00409EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 2:14 a.m.4 views

CVE-2012-4357

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

9.3CVSS8.1AI score0.21506EPSS
Exploits1References1
Circl
Circl
added 2025/05/06 6:39 p.m.1 views

CVE-2025-4357

creationtimestamp| type| source ---|---|--- 2025-05-06 18:39:53+00:00| exploited| https://t.me/cvedetector/24617...

9.8CVSS4.5AI score0.07903EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/05/06 1:31 p.m.13 views

CVE-2025-4357 Tenda RX3 telnet command injection

A vulnerability was found in Tenda RX3 16.03.13.11multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

5.8CVSS0.07903EPSS
Exploits1References5
OSV
OSV
added 2024/05/15 5:15 p.m.0 views

CVE-2024-4357

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...

6.5CVSS5.8AI score0.01544EPSS
Exploits0References1
NVD
NVD
added 2024/05/15 5:15 p.m.9 views

CVE-2024-4357

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...

6.5CVSS6.1AI score0.01544EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/15 4:58 p.m.12 views

CVE-2024-4357 XML External Entity Processing Information Disclosure

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...

6.5CVSS6.4AI score0.01544EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/15 4:58 p.m.12 views

CVE-2024-4357 XML External Entity Processing Information Disclosure

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing...

6.5CVSS6.3AI score0.01544EPSS
Exploits0References1
CVE
CVE
added 2024/05/15 4:58 p.m.20 views

CVE-2024-4357

Progress Telerik Report Server (versions 10.0.24.305 and earlier, i.e., 2024 Q1) suffers an XML External Entity Processing (XXE) information-disclosure vulnerability in the ValidateMetadaUri path. A low-privilege attacker could read system files; an authenticated context is required but may be by...

6.5CVSS6.1AI score0.01544EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.26 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0234-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.5897EPSS
Exploits2References2
Circl
Circl
added 2023/11/17 10:36 a.m.0 views

CVE-2023-4357

creationtimestamp| type| source ---|---|--- 2023-11-17 10:36:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5849 2023-11-17 14:54:26+00:00| published-proof-of-concept| Telegram/QSBwDO5JS9USsedDvROFYoSDD1KC919flQ4j3gNeoPMvw 2023-11-18 09:50:08+00:00| published-proof-of-concept|...

8.8CVSS8AI score0.5897EPSS
Exploits0References23
Kaspersky
Kaspersky
added 2023/08/23 12:0 a.m.29 views

KLA61310 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Audio can be exploited to cause denial of servi...

8.8CVSS9.4AI score0.5897EPSS
Exploits2References5
Microsoft CVE
Microsoft CVE
added 2023/08/21 7:0 a.m.66 views

Chromium: CVE-2023-4357 Insufficient validation of untrusted input in XML

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.5897EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/08/18 12:0 a.m.28 views

Debian: Security Advisory (DSA-5479-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9AI score0.5897EPSS
Exploits2References4
Rows per page
Query Builder