Lucene search
K

48 matches found

OSV
OSV
added 2026/01/06 2:15 a.m.2 views

CVE-2025-20799

In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issue ID: MSV-5049...

7.8CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/06 1:46 a.m.2 views

CVE-2025-20799

In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issue ID: MSV-5049...

7.8CVSS5.9AI score0.00006EPSS
Exploits0References2
Circl
Circl
added 2025/05/21 10:4 p.m.5 views

CVE-2025-5049

creationtimestamp| type| source ---|---|--- 2025-05-21 22:04:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppm7r5tyc2o...

9.8CVSS7AI score0.00479EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 6:41 p.m.5 views

CVE-2009-5049

WebApp JSP Snoop page XSS in jetty though 6.1.21...

6.1CVSS6AI score0.00815EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-5049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to...

8.8CVSS7.9AI score0.0031EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/05/17 2:0 p.m.12 views

CVE-2024-5049 Codezips E-Commerce Site editproduct.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

6.5CVSS6.9AI score0.00275EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/05/17 2:0 p.m.18 views

CVE-2024-5049 Codezips E-Commerce Site editproduct.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

6.5CVSS6.4AI score0.00275EPSS
Exploits1References4
Circl
Circl
added 2024/02/01 2:46 p.m.4 views

CVE-2019-5049

creationtimestamp| type| source ---|---|--- 2024-02-01 14:46:15+00:00| seen| https://t.me/ctinow/177588...

10CVSS8.7AI score0.00418EPSS
Exploits0References1
CVE
CVE
added 2023/10/30 1:49 p.m.73 views

CVE-2023-5049

CVE-2023-5049 affects the Giveaways and Contests by RafflePress plugin for WordPress. The flaw is Stored XSS via the rafflepress/rafflepress_gutenberg shortcode, caused by insufficient input sanitization and output escaping on the giframe attribute. Authenticated attackers with contributor or hig...

6.4CVSS5.2AI score0.00114EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/30 1:49 p.m.5 views

CVE-2023-5049 Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Giveaways and Contests by RafflePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rafflepress' and 'rafflepressgutenberg' shortcode in versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping on 'giframe' user supplied...

6.4CVSS6.8AI score0.00114EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/09/11 1:24 p.m.58 views

Moderate: Red Hat Security Advisory: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS7.2AI score0.00667EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/11 12:0 a.m.35 views

RHEL 8 : httpd:2.4 (RHSA-2023:5049)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5049 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modproxyuwsgi HTTP respon...

7.5CVSS8.1AI score0.00667EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2021/09/09 10:36 a.m.40 views

CVE-2017-5049

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

8.8CVSS5.8AI score0.0031EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/01/05 6:39 p.m.9 views

CVE-2020-5049

...

Exploits0
CVE
CVE
added 2021/01/05 6:39 p.m.25 views

CVE-2020-5049

This CVE entry is rejected and not used; it does not represent an active vulnerability.

6.7AI score
Exploits0
Virtuozzo
Virtuozzo
added 2020/11/18 12:0 a.m.14 views

Virtuozzo Linux Errata and Bugfix Advisory 2020:5049

Upstream security update. Follow RHBA-2020:5049 for details...

2.4AI score
Exploits0
Circl
Circl
added 2019/11/06 10:28 p.m.3 views

CVE-2009-5049

creationtimestamp| type| source ---|---|--- 2019-11-06 22:28:19+00:00| seen| https://t.me/cibsecurity/7938...

6.1CVSS6.5AI score0.00815EPSS
Exploits1References1
NVD
NVD
added 2019/11/06 7:15 p.m.19 views

CVE-2009-5049

WebApp JSP Snoop page XSS in jetty though 6.1.21...

6.1CVSS6.3AI score0.00815EPSS
Exploits1References3
CVE
CVE
added 2019/11/06 6:46 p.m.138 views

CVE-2009-5049

CVE-2009-5049 affects Jetty, specifically the WebApp JSP Snoop page in Jetty 6.1.21. The vulnerability arises from improper validation of user-supplied input in the WebApp JSP Snoop page, enabling cross-site scripting (XSS). The connected sources consistently describe a WebApp JSP Snoop page XSS ...

6.1CVSS5.9AI score0.00815EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2019/11/06 6:46 p.m.22 views

CVE-2009-5049

WebApp JSP Snoop page XSS in jetty though 6.1.21...

6.3AI score0.00815EPSS
Exploits1References3
Rows per page
Query Builder