Lucene search
K

62 matches found

Circl
Circl
added 2026/03/29 12:18 p.m.3 views

CVE-2026-5043

creationtimestamp| type| source ---|---|--- 2026-03-29 12:18:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi74xtv22j2m 2026-03-29 12:40:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi766ktwt72l 2026-03-29 13:15:14+00:00|...

9CVSS8AI score0.00793EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/29 11:15 a.m.2 views

CVE-2026-5043

A weakness has been identified in Belkin F9K1122 1.00.33. The impacted element is the function formSetPassword of the file /goform/formSetPassword of the component Parameter Handler. This manipulation of the argument webpage causes stack-based buffer overflow. Remote exploitation of the attack is...

9CVSS7.5AI score0.00793EPSS
Exploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/31 6:11 p.m.3 views

CVE-2025-5043

A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS6.9AI score0.00156EPSS
Exploits0References1
Circl
Circl
added 2025/07/29 3:0 a.m.10 views

CVE-2025-5043

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-699/ 2025-07-29 19:17:48+00:00| seen| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015 2025-07-29 20:45:45+00:00| seen|...

7.8CVSS7.5AI score0.00156EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 5:18 a.m.9 views

CVE-2019-5043

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...

7.8CVSS6.7AI score0.00673EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:58 p.m.11 views

CVE-2009-5043

burn allows file names to escape via mishandled quotation marks...

9.8CVSS6.8AI score0.0123EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2016-5043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF...

7.5CVSS7.8AI score0.04379EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.21 views

RHEL 7 : libdwarf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libdwarf: heap-based buffer over-read in dwarfformsdata CVE-2017-9055 - The dwarfreadciefdeprefix functio...

7.7AI score0.05111EPSS
Exploits24References38
IBM Security Bulletins
IBM Security Bulletins
added 2024/03/19 11:36 p.m.23 views

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Kubernetes ingress-nginx

Summary Multiple vulnerabilities in Kubernetes ingress-nginx used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-4886 DESCRIPTION: Kubernetes could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw with path...

8.8CVSS8.3AI score0.56568EPSS
Exploits2Affected Software1
Circl
Circl
added 2024/02/01 2:46 p.m.6 views

CVE-2019-5043

creationtimestamp| type| source ---|---|--- 2024-02-01 14:46:13+00:00| seen| https://t.me/ctinow/177587...

7.8CVSS5.8AI score0.00673EPSS
Exploits1References1
Circl
Circl
added 2023/10/30 8:13 a.m.22 views

CVE-2023-5043

creationtimestamp| type| source ---|---|--- 2023-10-30 08:13:06+00:00| seen| Telegram/MCOtq6YNws1wIQDmkmW4fj5yPvTPQ5hjf1qfUTkU-awDNw 2023-10-30 09:02:14+00:00| seen| https://t.me/KomunitiSiber/999 2023-10-30 17:00:07+00:00| seen| https://t.me/truesecator/5023 2023-11-29 09:38:53+00:00| seen|...

8.8CVSS8.3AI score0.02234EPSS
Exploits0References9
The Hacker News
The Hacker News
added 2023/10/30 6:46 a.m.118 views

Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes

Three unpatched high-severity security flaws have been disclosed in the NGINX Ingress controller for Kubernetes that could be weaponized by a threat actor to steal secret credentials from the cluster. The vulnerabilities are as follows - CVE-2022-4886 CVSS score: 8.8 - Ingress-nginx path...

8.2AI score0.56568EPSS
Exploits2
SUSE CVE
SUSE CVE
added 2023/10/27 12:56 a.m.2 views

SUSE CVE-2023-5043

Ingress nginx annotation injection causes arbitrary command execution...

8.8CVSS7.8AI score0.02234EPSS
Exploits0References4
OSV
OSV
added 2023/10/25 9:30 p.m.31 views

GHSA-5WJ4-WFFQ-3378 Ingress nginx annotation injection causes arbitrary command execution

Issue Details A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx...

7.6CVSS8.2AI score0.02234EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2023/10/25 9:30 p.m.41 views

Ingress nginx annotation injection causes arbitrary command execution

Issue Details A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx...

8.8CVSS7.4AI score0.02234EPSS
Exploits0References6Affected Software1
Chainguard
Chainguard
added 2023/10/25 8:15 p.m.45 views

CVE-2023-5043 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

6.5CVSS7.4AI score0.02234EPSS
Exploits0
Wolfi
Wolfi
added 2023/10/25 8:15 p.m.298 views

CVE-2023-5043 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

6.5CVSS7.7AI score0.02234EPSS
Exploits0
OSV
OSV
added 2023/10/25 8:15 p.m.27 views

CVE-2023-5043

Ingress nginx annotation injection causes arbitrary command execution...

8.8CVSS8.4AI score
Exploits0References4
CVE
CVE
added 2023/10/25 7:18 p.m.244 views

CVE-2023-5043

CVE-2023-5043 affects Kubernetes ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation injection allows a remote authenticated attacker to execute arbitrary commands on the system due to improper input validation. IBM’s bulletin associates this CVE with IBM Cloud Ku...

8.8CVSS8.5AI score0.02234EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/10/25 7:18 p.m.51 views

CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution

Ingress nginx annotation injection causes arbitrary command execution...

7.6CVSS9.2AI score0.02234EPSS
Exploits0References4
Rows per page
Query Builder