Lucene search
+L

63 matches found

OSV
OSV
added 2024/05/06 6:15 a.m.8 views

CVE-2024-4525

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /view/studentpaymentdetails4.php. The manipulation of the argument index leads to cross site scripting. The attack can be...

6.1CVSS3.8AI score0.0056EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.30 views

Oracle Linux 5 : kvm (ELSA-2011-0028)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0028 advisory. - CVE: CVE-2010-4525 - Resolves: bz570532 CVE-2010-0435 kvm: vmx null pointer dereference - CVE: CVE-2010-0435 - Related: bz639887 CVE-2010-3698 kvm: invalid...

6.6CVSS5.5AI score0.0048EPSS
SaveExploits2References2
NVD
NVD
added 2023/08/30 2:15 a.m.11 views

CVE-2023-4525

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

6.6AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/12/15 9:15 p.m.6 views

CVE-2022-4525

A vulnerability has been found in National Sleep Research Resource sleepdata.org up to 58.x and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 59.0.0.r...

6.1CVSS3.6AI score0.00529EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2022/12/15 12:00 a.m.68 views

CVE-2022-4525

CVE-2022-4525 affects the National Sleep Research Resource sleepdata.org (versions up to 58.x). The vulnerability is a cross-site scripting issue arising from an unknown functionality, exploitable remotely via network access. Mitigation: upgrade to 59.0.0.rc; the patch is identified as da44a3893b...

6.1CVSS4.9AI score0.00529EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/12/15 12:00 a.m.22 views

CVE-2022-4525 National Sleep Research Resource sleepdata.org cross site scripting

A vulnerability has been found in National Sleep Research Resource sleepdata.org up to 58.x and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 59.0.0.r...

3.5CVSS3.8AI score
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.15 views

Mageia: Security Advisory (MGASA-2013-0356)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.5AI score0.01838EPSS
SaveExploits4References9
OpenVAS
OpenVAS
added 2020/09/23 12:00 a.m.32 views

Ubuntu: Security Advisory (USN-4525-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS6.9AI score0.05271EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/22 12:00 a.m.109 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4525-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4525-1 advisory. It was discovered that the AMD Cryptographic Coprocessor device driver in the Linux kernel did not properly deallocate memory in some...

7CVSS7.1AI score0.05271EPSS
SaveExploits0References6
Circl
Circl
added 2019/12/27 4:40 p.m.12 views

CVE-2014-4525

creationtimestamp| type| source ---|---|--- 2019-12-27 16:40:13+00:00| seen| https://t.me/cibsecurity/8877...

6.1CVSS6.1AI score0.0118EPSS
SaveExploits2References1
CVE
CVE
added 2019/12/27 1:47 p.m.76 views

CVE-2014-4525

The CVE-2014-4525 entry describes a cross-site scripting (XSS) vulnerability in the magpie/scripts/magpie_slashbox.php file of the WP Ebay Feeds plugin for WordPress, affecting version 1.1 and earlier. The issue arises via the rss_url parameter, allowing remote attackers to inject arbitrary JavaS...

6.1CVSS6.1AI score0.0118EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2019/12/02 5:46 p.m.58 views

CVE-2012-4525

Piwigo has a Cross-Site Scripting (XSS) vulnerability in password.php (CVE-2012-4525). Multiple sources confirm the issue exists in Piwigo and some Red Hat/Ubuntu entries describe an incomplete fix for CVE-2012-4525, indicating remediation is not fully clear from the provided documents. The affec...

6.1CVSS5.9AI score0.01207EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/09/19 12:00 a.m.28 views

Debian DSA-4525-1 : ibus - security update

Simon McVittie reported a flaw in ibus, the Intelligent Input Bus. Due to a misconfiguration during the setup of the DBus, any unprivileged user could monitor and send method calls to the ibus bus of another user, if able to discover the UNIX socket used by another user connected on a graphical...

7.1CVSS7AI score0.00365EPSS
SaveExploits0References6
CVE
CVE
added 2018/03/16 2:04 p.m.36 views

CVE-2017-4525

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

8.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/07/21 12:00 a.m.20 views

Moodle 2.3.x < 2.3.10 / 2.4.x < 2.4.7 / 2.5.x < 2.5.3 Multiple Vulnerabilities

Binary data 9419.prm...

6.8CVSS6.8AI score0.01838EPSS
SaveExploits4References7
CVE
CVE
added 2016/06/25 1:00 a.m.50 views

CVE-2016-4525

Summary: CVE-2016-4525, CVE-2016-4528 and CVE-2016-5810 affect Advantech WebAccess prior to version 8.1_20160519. The issues arise from unsafe ActiveX controls marked as safe-for-scripting (CVE-2016-4525), a buffer overflow via crafted DLLs (CVE-2016-4528), and information exposure where an authe...

6.6CVSS6AI score0.00449EPSS
SaveExploits0References1Affected Software1
ICS
ICS
added 2016/03/25 6:00 a.m.43 views

Advantech WebAccess ActiveX Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-173-01 Advantech WebAccess ActiveX Vulnerabilities that was published June 21, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- Zhou Yu of Acorn Network Security and ZDI Zero...

6.6CVSS6.7AI score0.00675EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2015/10/06 12:00 a.m.40 views

Oracle: Security Advisory (ELSA-2011-0007)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.5AI score0.14668EPSS
SaveExploits64References4
OpenVAS
OpenVAS
added 2015/10/06 12:00 a.m.42 views

Oracle: Security Advisory (ELSA-2011-0028)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.6CVSS7.8AI score0.00359EPSS
SaveExploits2References2
CVE
CVE
added 2015/07/04 10:00 a.m.45 views

CVE-2015-4525

EMC Isilon OneFS log-gather web admin interface vulnerability (CVE-2015-4525) allows remote authenticated users to execute commands with root privileges due to improper input validation in the log collection path. Affected: OneFS 6.5.x.x–7.1.1.x (before 7.1.1.5) and 7.2.0.x (before 7.2.0.2). Impa...

9CVSS7.5AI score0.02207EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder