Lucene search
K

54 matches found

OSV
OSV
added 2026/02/14 1:53 a.m.1 views

MINI-4797-HJCG-PCFF

Bulletin has no description...

4.3CVSS5AI score0.00023EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/12/03 3:6 p.m.2 views

CVE-2025-20773

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4797...

6.7CVSS6.8AI score0.00006EPSS
Exploits0References1
OSV
OSV
added 2025/12/02 3:16 a.m.0 views

CVE-2025-20773

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4797...

6.7CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/02 2:34 a.m.3 views

CVE-2025-20773

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4797...

6.5AI score0.00006EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/02 2:34 a.m.5 views

CVE-2025-20773

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4797...

0.00006EPSS
Exploits0References1
Circl
Circl
added 2025/06/03 4:59 a.m.13 views

CVE-2025-4797

creationtimestamp| type| source ---|---|--- 2025-06-03 04:59:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoizzx5gjm2 2025-06-03 05:00:21+00:00| seen| Telegram/YQh-UDv8jIf7W26Mx1ObULpfId3YafRiCK8KhxFRRwhCXok 2026-04-08...

9.8CVSS4.8AI score0.00583EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/03 4:22 a.m.6 views

CVE-2025-4797 Golo <= 1.7.0 - Authentication Bypass to Account Takeover

The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0. This is due to the plugin not properly validating a user's identity prior to setting an authorization cookie. This makes it...

9.8CVSS5.8AI score0.00583EPSS
Exploits0References2
Oracle linux
Oracle linux
added 2024/05/23 12:0 a.m.36 views

frr security update

7.5.1-22.0.1 - Fix POSTIN scriptlet Orabug: 34712485 - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgpflowspec.c - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgplabel.c - Resolves: RHEL-15869 - crash from specially crafted MPUNREACHNLRI-containing BGP UPDATE message - Resolves:...

7.5CVSS7.2AI score0.05648EPSS
Exploits1
CVE
CVE
added 2024/05/12 7:31 a.m.36 views

CVE-2024-4797

The CVE-2024-4797 affects Campcodes Online Laundry Management System 1.0. The vulnerability resides in the /ajax.php endpoint where the arguments name/customer_name/username can be manipulated to trigger cross-site scripting. Exploitation can be performed remotely, and public exploitation informa...

6.1CVSS6.3AI score0.00167EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/05/12 7:31 a.m.16 views

CVE-2024-4797 Campcodes Online Laundry Management System ajax.php cross site scripting

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ajax.php. The manipulation of the argument name/customername/username leads to cross site scripting. The attack can be initiated...

5.3CVSS4.2AI score0.00167EPSS
Exploits1References4
Circl
Circl
added 2024/01/23 5:16 p.m.0 views

CVE-2023-4797

creationtimestamp| type| source ---|---|--- 2024-01-23 17:16:57+00:00| seen| https://t.me/ctinow/172138 2024-02-06 09:41:28+00:00| seen| https://t.me/ctinow/179856...

7.2CVSS7AI score0.0056EPSS
Exploits2References2
CVE
CVE
added 2024/01/16 3:56 p.m.63 views

CVE-2023-4797

CVE-2023-4797 affects the Newsletters WordPress plugin before 4.9.3, where user-supplied parameters appended to SQL queries and shell commands are not properly escaped, enabling potential administrator-led arbitrary command execution on the server. The Red Hat/NVD entries corroborate the same des...

7.2CVSS7.2AI score0.0056EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2022/12/28 12:0 a.m.14 views

CVE-2022-4797 Improper Restriction of Excessive Authentication Attempts in usememos/memos

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1...

9.8CVSS5AI score0.00183EPSS
Exploits1References2
CVE
CVE
added 2022/12/28 12:0 a.m.71 views

CVE-2022-4797

CVE-2022-4797 affects usememos/memos prior to v0.9.1. The root cause is improper restriction of excessive authentication attempts, enabling brute-force access to post deletion by guessing post IDs. Consequences include potential deletion of other users’ posts (high impact per linked advisories). ...

9.8CVSS5AI score0.00183EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.5 views

CVE-2022-4797 Improper Restriction of Excessive Authentication Attempts in usememos/memos

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1...

9.8CVSS5.7AI score0.00183EPSS
Exploits1References2
OSV
OSV
added 2022/12/28 12:0 a.m.11 views

CVE-2022-4797 Improper Restriction of Excessive Authentication Attempts in usememos/memos

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1...

9.8CVSS7.2AI score0.00183EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2022/06/01 12:0 a.m.38 views

Oracle Linux 8 : maven:3.6 (ELSA-2022-4797)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4797 advisory. maven-shared-utils 3.2.1-0.4 - Build with OpenJDK 8 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

9.8CVSS8.1AI score0.00255EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2022/05/30 12:51 p.m.80 views

Important: Red Hat Security Advisory: maven:3.6 security update

An update for the maven:3.6 module is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Extended Update Support, and Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

9.8CVSS7.1AI score0.00255EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/05/30 12:0 a.m.45 views

CentOS 8 : maven:3.6 (CESA-2022:4797)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:4797 advisory. - maven-shared-utils: Command injection via Commandline class CVE-2022-29599 Note that Nessus has not tested for this issue but has instead relied only on the...

9.8CVSS8.1AI score0.00255EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/04/08 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2022:1129-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.04509EPSS
Exploits3References15
Rows per page
Query Builder