Lucene search
+L

186 matches found

Debian CVE
Debian CVE
added 2025/05/16 7:32 p.m.33 views

CVE-2025-4802

Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen including internal dlopen calls after setlocale or calls to NSS functions...

7.8CVSS6.8AI score0.00548EPSS
Exploits1
Cvelist
Cvelist
added 2025/05/16 7:32 p.m.101 views

CVE-2025-4802

Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen including internal dlopen calls after setlocale or calls to NSS functions...

0.00548EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2015-4802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown...

4CVSS6.7AI score0.04159EPSS
Exploits0References3
Circl
Circl
added 2025/02/14 10:3 a.m.8 views

CVE-2024-4802

creationtimestamp| type| source ---|---|--- 2025-02-14 10:03:11+00:00| seen| Telegram/JVyQDfB9Es1oTegjIecCF1rKIQlsvsUdeusdaRPJqK8qLr5...

8.8CVSS6.2AI score0.00835EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2024/05/12 10:31 p.m.15 views

CVE-2024-4802 Kashipara College Management System submit_extracurricular_activity.php sql injection

A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submitextracurricularactivity.php. The manipulation of the argument activitydatetime leads to sql injection. It is possible to launch the attack...

6.5CVSS7.4AI score0.00835EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/05/12 10:31 p.m.23 views

CVE-2024-4802 Kashipara College Management System submit_extracurricular_activity.php sql injection

A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submitextracurricularactivity.php. The manipulation of the argument activitydatetime leads to sql injection. It is possible to launch the attack...

6.5CVSS7AI score0.00835EPSS
Exploits1References4
CVE
CVE
added 2024/05/12 10:31 p.m.46 views

CVE-2024-4802

CVE-2024-4802 affects Kashipara College Management System 1.0. The vulnerability is in the file submit_extracurricular_activity.php and arises from manipulation of the activity_datetime parameter, causing a SQL injection. Exploitation can be remote and public exploits have been disclosed. Some so...

8.8CVSS7.3AI score0.00835EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/04/24 12:0 a.m.45 views

RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2016:1132)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1132 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. MariaD...

9.8CVSS7.8AI score0.30146EPSS
Exploits12References119
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.2 views

Malicious code in wlwz-2312-4802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96e271afa550a130677affbf4460afe6380a6a7eebd04e245bd946811ae6c00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/01/24 8:23 p.m.5 views

MAL-2024-604 Malicious code in wlwz-2312-4802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96e271afa550a130677affbf4460afe6380a6a7eebd04e245bd946811ae6c00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/16 12:0 a.m.17 views

Ubuntu 16.04 ESM / 18.04 ESM : HTSlib vulnerabilities (USN-4802-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4802-1 advisory. It was discovered that HTSlib incorrectly handled certain data. An attacker could possibly use this issue to execute arbitrary code. This iss...

9.8CVSS8.8AI score0.01954EPSS
Exploits0References3
NVD
NVD
added 2023/09/14 7:16 p.m.9 views

CVE-2018-4802

Rejected reason: This candidate is unused by its CNA...

6.6AI score
Exploits0
Circl
Circl
added 2023/09/13 8:34 p.m.8 views

CVE-2023-4802

creationtimestamp| type| source ---|---|--- 2023-09-13 20:34:20+00:00| seen| https://t.me/cibsecurity/70408...

4.8CVSS4.9AI score0.003EPSS
Exploits0References1
OSV
OSV
added 2023/09/13 4:15 p.m.5 views

CVE-2023-4802

A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management ITM Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to...

4.8CVSS5.8AI score0.003EPSS
Exploits0References2
CVE
CVE
added 2023/09/13 3:15 p.m.46 views

CVE-2023-4802

The CVE-2023-4802 issue affects Proofpoint ITM Server (UpdateInstalledSoftware endpoint) prior to version 7.14.3.69. The vulnerability is a reflected cross-site scripting (XSS) that allows an authenticated administrator to execute arbitrary JavaScript in another web console administrator’s browse...

4.8CVSS4.8AI score0.003EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/13 3:15 p.m.15 views

CVE-2023-4802 ITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint

A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management ITM Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to...

4.8CVSS6.1AI score0.003EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:17 a.m.3 views

SUSE CVE-2015-4802

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792...

4CVSS6AI score0.04159EPSS
Exploits0References15
Circl
Circl
added 2022/12/28 4:12 p.m.7 views

CVE-2022-4802

creationtimestamp| type| source ---|---|--- 2022-12-28 16:12:25+00:00| seen| https://t.me/cibsecurity/55484...

9.1CVSS7.2AI score0.00568EPSS
Exploits1References1
NVD
NVD
added 2022/12/28 2:15 p.m.29 views

CVE-2022-4802

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

9.1CVSS0.00568EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.6 views

CVE-2022-4802 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

9.1CVSS5.5AI score0.00568EPSS
Exploits1References2
Rows per page
Query Builder