Lucene search
K

121 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 2:58 p.m.1 views

CVE-2026-4475

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.120171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The exploit has been...

8.8CVSS6.7AI score0.00028EPSS
Exploits0References1
CVE
CVE
added 2026/03/20 6:2 a.m.7 views

CVE-2026-4475

CVE-2026-4475 concerns Yi Technology YI Home Camera 2 (version 2.1.1_20171024151200). The vulnerability is in an unknown function within the file home/web/ipc, leading to hard-coded credentials. Access to the local network is required for exploitation. Public disclosure has occurred, and the vend...

8.8CVSS6.7AI score0.00028EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/20 6:2 a.m.20 views

CVE-2026-4475 Yi Technology YI Home Camera ipc hard-coded credentials

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.120171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The exploit has been...

8.8CVSS0.00028EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2014-4475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of...

6.8CVSS6.1AI score0.00843EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 12:14 a.m.3 views

CVE-2022-4475

The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.4CVSS5.9AI score0.00252EPSS
Exploits2References1
Circl
Circl
added 2025/05/08 8:23 p.m.7 views

CVE-2025-4475

creationtimestamp| type| source ---|---|--- 2025-05-08 20:23:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15609 2025-05-08 20:31:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114474111264635420 2025-05-08 21:15:10+00:00| seen|...

4.8AI score
Exploits0References5
NVD
NVD
added 2025/05/08 8:15 p.m.9 views

CVE-2025-4475

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Exploits0
Vulnrichment
Vulnrichment
added 2025/05/08 8:6 p.m.6 views

CVE-2025-4475

...

6.6AI score
Exploits0
Cvelist
Cvelist
added 2025/05/08 8:6 p.m.10 views

CVE-2025-4475

...

Exploits0
Cvelist
Cvelist
added 2024/06/21 6:0 a.m.11 views

CVE-2024-4475 WP Logs Book <= 1.0.1 - Log Clearing via CSRF

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers to make a logged in admin clear the logs them via a CSRF attack...

0.00065EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2024/06/21 6:0 a.m.12 views

CVE-2024-4475 WP Logs Book <= 1.0.1 - Log Clearing via CSRF

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check when clearing logs, which could allow attackers to make a logged in admin clear the logs them via a CSRF attack...

6.7AI score0.00065EPSS
Exploits2References1
CVE
CVE
added 2023/08/22 9:2 a.m.35 views

CVE-2023-4475

ASUSTOR Data Master (ADM) is affected by an Arbitrary File Movement vulnerability via the file renaming feature. Affected: ADM 4.0.6.RIS1 and below, ADM 4.1.0 and below, ADM 4.2.2.RI61 and below. Root cause: exploitation of the file renaming mechanism to move files into unintended directories. Im...

7.5CVSS6.1AI score0.00082EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2023/01/23 6:25 p.m.3 views

CVE-2022-4475

creationtimestamp| type| source ---|---|--- 2023-01-23 18:25:16+00:00| seen| https://t.me/cibsecurity/56845...

5.4CVSS5.5AI score0.00252EPSS
Exploits2References1
CVE
CVE
added 2023/01/23 2:31 p.m.52 views

CVE-2022-4475

CVE-2022-4475 affects the Collapse-O-Matic WordPress plugin, versions prior to 1.8.3. The vulnerability arises from not validating/escaping certain shortcode attributes before rendering, enabling a user with as little as a contributor role to perform a Stored XSS against higher-privilege users (e...

5.4CVSS5.3AI score0.00252EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2023/01/23 2:31 p.m.16 views

CVE-2022-4475 Collapse-O-Matic < 1.8.3 - Contributor+ Stored XSS

The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.5AI score0.00252EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2021/09/24 12:0 a.m.24 views

Samba >= 3.2.0 Bypass File Restriction Vulnerability (CVE-2013-4475)

ACLs are not checked on opening an alternate data stream on a file or directory. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

4CVSS6.4AI score0.06902EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.33 views

SUSE: Security Advisory (SUSE-SU-2015:1528-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.1AI score0.71568EPSS
Exploits8References6
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2014:0024-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.7AI score0.06902EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2015:1476-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.71568EPSS
Exploits8References9
Circl
Circl
added 2020/11/16 8:37 p.m.0 views

CVE-2020-4475

creationtimestamp| type| source ---|---|--- 2020-11-16 20:37:59+00:00| seen| https://t.me/cibsecurity/16383...

6.5CVSS4.8AI score0.00148EPSS
Exploits0References1
Rows per page
Query Builder