Lucene search
+L

143 matches found

Nuclei
Nuclei
added yesterday28 views

Import Legacy Media <= 0.1 - Cross-Site Scripting

A cross-site scripting vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4535 info: name: Import Legacy Media = 0.1 - Cross-Site...

6.1CVSS6.4AI score0.03983EPSS
SaveExploits2References4
OSV
OSV
added 4 days ago4 views

MINI-7Q39-4535-95J5

Bulletin has no description...

4.5CVSS4.8AI score0.00177EPSS
SaveExploits1
OSV
OSV
added 2026/04/18 3:31 p.m.6 views

MINI-MHVC-3Q4W-4535

Bulletin has no description...

7.1CVSS5.6AI score0.00261EPSS
SaveExploits0
Circl
Circl
added 2026/03/21 8:47 a.m.9 views

CVE-2026-4535

creationtimestamp| type| source ---|---|--- 2026-03-21 08:47:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266293950470223 2026-03-22 04:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4535 2026-03-22 06:00:31+00:00| seen|...

9CVSS7.2AI score0.00632EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/03/21 12:0 a.m.10 views

PT-2026-26919

A vulnerability has been found in Tenda FH451 1.0.0.9. This vulnerability affects the function WrlclientSet of the file /goform/WrlclientSet. Such manipulation of the argument GO leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the publi...

9CVSS8AI score0.00632EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2026/02/20 6:40 a.m.3 views

CVE-2017-4535

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.4 views

MiracleLinux 7 : dpdk-18.11.5-1.el7 (AXSA:2020-4535:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4535:01 advisory. dpdk: possible memory leak leads to denial of service CVE-2019-14818 Tenable has extracted the preceding description block directly from the MiracleLinux...

7.5CVSS5.5AI score0.02815EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:48 a.m.8 views

CVE-2009-4535

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI...

5CVSS7.1AI score0.06677EPSS
SaveExploits3References1
Packet Storm
Packet Storm
added 2025/10/06 12:0 a.m.152 views

📄 WordPress KKProgressbar2 1.1.4.2 Cross Site Request Forgery

WordPress KKProgressbar2 version 1.1.4.2 cross site request forgery proof of concept exploit. Exploit Title: WordPress Plugin KKProgressbar2 - Cross-Site Request Forgery CSRF Date: 2025-10-05 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H:...

8.8CVSS6.6AI score0.00324EPSS
SaveExploits3
OSV
OSV
added 2025/08/10 8:40 a.m.3 views

MINI-WW58-4535-R77Q

Bulletin has no description...

5.3CVSS7.2AI score0.03765EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.8 views

TencentOS Server 4: opensc (TSSA-2024:0030)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0030 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

7.5CVSS6.4AI score0.01144EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 11:39 a.m.9 views

CVE-2016-4535

Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service memory corruption and crash via a crafted packed executable...

7.8CVSS7AI score0.09751EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:3 a.m.9 views

CVE-2011-4535

Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier, ScadaTEC ModbusTagServer 4.1.1.81 and earlier, and other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted ZIP...

6.8CVSS8.4AI score0.27003EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/13 8:19 a.m.15 views

CVE-2025-4535

A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information...

6.9CVSS6.4AI score0.00554EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/05/11 8:0 a.m.9 views

CVE-2025-4535 Gosuncn Technology Group Audio-Visual Integrated Management Platform Configuration File config.properties information disclosure

A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information...

6.9CVSS5.3AI score0.00554EPSS
SaveExploits1References4
CVE
CVE
added 2025/05/11 8:0 a.m.66 views

CVE-2025-4535

The CVE refers to Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0, specifically the Configuration File Handler component. Affected is the /config/config.properties file, where manipulation leads to information disclosure. The flaw is exploitable remotely; public exploits ...

6.9CVSS5.2AI score0.00554EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/05/11 8:0 a.m.34 views

CVE-2025-4535 Gosuncn Technology Group Audio-Visual Integrated Management Platform Configuration File config.properties information disclosure

A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information...

6.9CVSS0.00554EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2013-4535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to...

8.8CVSS7AI score0.00957EPSS
SaveExploits0References2
Rosalinux
Rosalinux
added 2025/01/27 10:38 a.m.17 views

Advisory ROSA-SA-2025-2580

software: opensc 0.23.0 OS: ROSA-CHROME packageevrstring: opensc-0.23.0-2 CVE-ID: CVE-2023-40660 BDU-ID: 2024-02589 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the OpenSC smart card software toolkit and libraries is related to the fact that token/card authentication by one process can perform...

6.6CVSS7.4AI score0.01174EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/07/03 12:0 a.m.27 views

CBL Mariner 2.0 Security Update: opensc (CVE-2023-4535)

The version of opensc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4535 advisory. - An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling...

4.5CVSS5.5AI score0.00466EPSS
SaveExploits0References2
Rows per page
Query Builder