Lucene search
K

99 matches found

Zero Day Initiative
Zero Day Initiative
added 2026/04/15 12:0 a.m.4 views

DriveLock Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4568 by default. The issue results from the...

5.3CVSS5.7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/15 12:0 a.m.3 views

DriveLock SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4568 by default. The issue results from the lack of proper...

8.8CVSS5.9AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/15 12:0 a.m.2 views

DriveLock Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4568 by default. The issue results from the lac...

6.5CVSS5.7AI score
Exploits0References1
Circl
Circl
added 2026/03/23 4:27 a.m.0 views

CVE-2026-4568

creationtimestamp| type| source ---|---|--- 2026-03-23 04:27:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhp7uiwwvj2o...

6.5CVSS6.6AI score0.00015EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/23 2:12 a.m.0 views

CVE-2026-4568 SourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql injection

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS6.4AI score0.00015EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/20 6:41 a.m.2 views

CVE-2017-4568

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.5AI score
Exploits0References1
EUVD
EUVD
added 2026/01/24 9:8 a.m.2 views

EUVD-2026-4568

The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. This is due to missing nonce verification on the 'SurveyJSRenameSurvey' AJAX...

4.3CVSS5.3AI score0.00044EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:25 a.m.5 views

CVE-2023-4568

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

6.5CVSS7.2AI score0.78159EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2025/12/05 12:0 a.m.3 views

Fedora 42 : texlive-base / xpdf (2025-e72c726192)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-e72c726192 advisory. Update to 4.06. Lots of bugfixes, but notably, security fixes for the following CVEs: CVE-2024-2971 CVE-2024-3247 CVE-2024-3248 CVE-2024-3900...

8.2CVSS5AI score0.0024EPSS
Exploits2References14
OpenVAS
OpenVAS
added 2025/11/17 12:0 a.m.1 views

Slackware: Security Advisory (SSA:2025-319-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS6.8AI score0.0024EPSS
Exploits2References15
Tenable Nessus
Tenable Nessus
added 2025/09/01 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-4568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.05 and earlier, a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow. CVE-2024-4568 Note that Nessus relies on the...

5.5CVSS5.5AI score0.00012EPSS
Exploits0References3
Circl
Circl
added 2025/06/05 10:53 a.m.7 views

CVE-2025-4568

creationtimestamp| type| source ---|---|--- 2025-06-05 10:53:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqu5q425pi2r 2025-06-05 11:00:33+00:00| seen| Telegram/YPcpoDw6jiJDmYZAO3xumgwuDhmC0NT79T21Hda3Cd89Jso 2025-06-05 11:47:16+00:00| seen|...

9.3CVSS4.8AI score0.00224EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:31 a.m.3 views

CVE-2011-4568

Cross-site scripting XSS vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI...

4.3CVSS6.1AI score0.00192EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/07 12:0 a.m.7 views

RockyLinux 8 : java-17-openjdk (RLSA-2024:4568)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4568 advisory. OpenJDK: RangeCheckElimination array index overflow 8323231 CVE-2024-21147 OpenJDK: potential UTF8 size overflow 8314794 CVE-2024-21131 OpenJDK: Excessiv...

7.4CVSS6.7AI score0.00977EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2024/07/18 12:0 a.m.29 views

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2024-4568)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4568 advisory. 1:17.0.12.0.7-2.0.1 - Add Oracle vendor bug URL 1:17.0.12.0.7-2 - Update to jdk-17.0.12+7 GA - Update .gitignore to ignore openjdk-17.0.12+7.tar.xz...

7.4CVSS6.7AI score0.00977EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/07/17 12:0 a.m.22 views

RHEL 8 / 9 : java-17-openjdk (RHSA-2024:4568)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4568 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security...

7.4CVSS6.8AI score0.00977EPSS
Exploits0References12
GithubExploit
GithubExploit
added 2024/05/20 5:41 p.m.433 views

Exploit for Improper Authentication in Papercut Papercut_Ng

Badges !MIT Licensehttps://img.shields.io/badge/Licens...

6.5CVSS6.7AI score0.78159EPSS
Exploits2
Cvelist
Cvelist
added 2024/05/06 7:56 p.m.14 views

CVE-2024-4568 Stack overflow in Xpdf 4.05 due to object loop in PDF resources

In Xpdf 4.05 and earlier, a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow...

2.9CVSS4.2AI score0.00012EPSS
Exploits0References1
Circl
Circl
added 2023/09/14 12:23 a.m.3 views

CVE-2023-4568

creationtimestamp| type| source ---|---|--- 2023-09-14 00:23:54+00:00| seen| https://t.me/cibsecurity/70422 2023-09-24 18:54:59+00:00| published-proof-of-concept| https://t.me/codeb0ss/1189 2023-09-28 05:04:24+00:00| seen| Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ 2023-09-28...

6.5CVSS6.3AI score0.78159EPSS
Exploits2References4
OSV
OSV
added 2023/09/13 9:15 p.m.2 views

CVE-2023-4568

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

6.5CVSS5.8AI score0.78159EPSS
Exploits2References1
Rows per page
Query Builder