Lucene search
K

68 matches found

OSV
OSV
added 2026/05/12 3:47 a.m.1 views

MINI-4529-WPFG-683X

Bulletin has no description...

6.1CVSS5.7AI score0.0001EPSS
Exploits0
OSV
OSV
added 2026/03/15 2:54 p.m.2 views

MINI-4XRW-4529-F744

Bulletin has no description...

9.8CVSS5.7AI score0.00019EPSS
Exploits0
OSV
OSV
added 2026/01/29 12:47 a.m.1 views

CGA-JCQM-4529-9X4Q

Bulletin has no description...

4.3CVSS5.8AI score0.00056EPSS
Exploits0
OSV
OSV
added 2026/01/28 8:30 a.m.1 views

CGA-3FFX-WH2H-4529

Bulletin has no description...

9.8CVSS5.8AI score0.00087EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 9:47 a.m.3 views

CVE-2011-4529

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

7.5CVSS8.1AI score0.48278EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/13 4:6 a.m.10 views

CVE-2025-4529

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file...

5.3CVSS6.9AI score0.00426EPSS
Exploits0References1
Circl
Circl
added 2025/05/11 4:27 a.m.15 views

CVE-2025-4529

creationtimestamp| type| source ---|---|--- 2025-05-11 04:27:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15919 2025-05-11 04:31:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loumoqfsrci2 2025-05-11...

5.3CVSS5.8AI score0.00426EPSS
Exploits0References4
NVD
NVD
added 2025/05/11 4:15 a.m.12 views

CVE-2025-4529

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file...

5.3CVSS0.00426EPSS
Exploits0References4
CVE
CVE
added 2025/05/11 4:0 a.m.55 views

CVE-2025-4529

CVE-2025-4529 affects Seeyon Zhiyuan OA Web Application System 8.1 SP2. The vulnerability lies in the Download function of the ZIP File Handler within seeyon-apps-m3.jar (M3CoreController.class): manipulating the Name argument enables path traversal. Remote exploitation is possible and the exploi...

5.3CVSS7.2AI score0.00426EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2025/05/11 4:0 a.m.17 views

CVE-2025-4529 Seeyon Zhiyuan OA Web Application System ZIP File M3CoreController.class download path traversal

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file...

5.3CVSS0.00426EPSS
Exploits0References4
Circl
Circl
added 2024/09/05 1:50 p.m.2 views

CVE-2022-4529

creationtimestamp| type| source ---|---|--- 2024-09-05 13:50:23+00:00| seen| https://t.me/cvedetector/4901...

5.3CVSS4.8AI score0.00053EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/09/05 12:0 a.m.7 views

WordPress S.A.F Plugin <= 2.3.5 is vulnerable to Bypass Vulnerability

Software S.A.F Type Plugin Vulnerable versions = 2.3.5 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2022-4529 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9594fd6b1026 Credits rezaduty Required privilege Unauthenticated...

5.3CVSS6.6AI score0.00053EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/27 6:0 a.m.18 views

CVE-2024-4529 Business Card <= 1.0.0 - Category Deletion via CSRF

The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as deleting card categories via CSRF attacks...

9.4AI score0.00108EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2024/05/27 6:0 a.m.18 views

CVE-2024-4529 Business Card <= 1.0.0 - Category Deletion via CSRF

The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as deleting card categories via CSRF attacks...

6.8AI score0.00108EPSS
Exploits2References1
Patchstack
Patchstack
added 2024/05/27 12:0 a.m.10 views

WordPress Business Card Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Business Card Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4529 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 39e12c4450d5 Credits Bob Matyas Required...

5CVSS6.6AI score0.00108EPSS
Exploits2References3Affected Software1
NVD
NVD
added 2023/09/14 7:16 p.m.10 views

CVE-2018-4529

Rejected reason: This candidate is unused by its CNA...

6.6AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/08/15 12:0 a.m.21 views

Oracle Linux 8 : libxml2 (ELSA-2023-4529)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4529 advisory. - Fix CVE-2023-28484 2185994 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

6.5CVSS7.3AI score0.00388EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:35 a.m.1 views

SUSE CVE-2013-4529

Buffer overflow in hw/pci/pcieaer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large lognum value in a savevm image...

7.5CVSS8.1AI score0.02104EPSS
Exploits0References9
CVE
CVE
added 2022/08/04 1:53 p.m.32 views

CVE-2019-4529

IBM Sterling Connect:Direct for UNIX is vulnerable to privilege escalation via a malicious getuid() replacement in the C/C++ API. Affected: UNIX versions 6.0.0, 4.3.0, and 4.2.0. An authenticated user with limited Connect:Direct privileges can exploit a custom application to gain unauthorized acc...

7.2AI score
Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2014-0426)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.8AI score0.04287EPSS
Exploits6References12
Rows per page
Query Builder