18 matches found
Exploit for CVE-2026-45829
FULL-A...
CVE-2026-45829
A flaw was found in the ChromaDB Python project. This pre-authentication code injection vulnerability allows an unauthenticated attacker to execute arbitrary code on the server. The attacker can achieve this by sending a malicious model repository to the...
CVE-2026-45829
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trustremotecode set to true in...
CVE-2024-45829
creationtimestamp| type| source ---|---|--- 2024-10-25 10:23:36+00:00| seen| https://t.me/cvedetector/8900...
CVE-2023-45829
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in HappyBox Newsletter & Bulk Email Sender – Email Newsletter Plugin for WordPress plugin = 2.0.1 versions...
CVE-2023-45829
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in HappyBox Newsletter & Bulk Email Sender – Email Newsletter Plugin for WordPress plugin = 2.0.1 versions...
CVE-2023-45829 WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in HappyBox Newsletter & Bulk Email Sender – Email Newsletter Plugin for WordPress plugin = 2.0.1 versions...
CVE-2023-45829
CVE-2023-45829 is a Stored XSS in the HappyBox Newsletter & Bulk Email Sender WordPress plugin (versions ≤ 2.0.1). Authenticated users with contributor+ permissions can exploit input handling that does not properly validate/escape parameters, enabling stored script execution. Impact per sources i...
WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Newsletter & Bulk Email Sender Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45829 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 83ca41771be8 Credits thiennv...
SUSE CVE-2021-45829
HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service...
CVE-2022-45829
creationtimestamp| type| source ---|---|--- 2022-12-07 00:41:01+00:00| seen| Telegram/57tE7LFqn3na02pb4xa9mIR3hG7o11QKdikBNHGroWk3yik...
CVE-2022-45829
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 at WordPress...
CVE-2022-45829
CVE-2022-45829 affects the WordPress Easy WP SMTP plugin, specifically versions <= 1.5.1. The vulnerability is an authenticated path traversal in the plugin, allowing traversal to sensitive files. Several sources also note potential arbitrary file deletion as part of the impact for affected ve...
CVE-2022-45829 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletion
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 at WordPress...
CVE-2021-45829
HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service...
CVE-2021-45829
HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service...
CVE-2021-45829
CVE-2021-45829 affects HDF5 1.13.1-1 with a segmentation fault that leads to Denial of Service. The connected sources consistently describe the issue as a DoS caused by a segmentation fault in HDF5 1.13.1-1. No exploit specifics, affected subcomponents, versions beyond the listed package, or conc...
