Lucene search
K

66 matches found

Circl
Circl
added 2026/04/11 2:45 a.m.0 views

CVE-2026-5054

creationtimestamp| type| source ---|---|--- 2026-04-11 02:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6szey3qd2z 2026-04-11 03:21:45+00:00| seen| Telegram/oNJqzE-05Zhzc8NPQW-z5MMZ2uUFxP7FYrJiMTOKneUM6w 2026-04-11 06:00:30+00:00| seen|...

7.8CVSS7.5AI score0.00019EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/06/06 3:13 a.m.812 views

Exploit for Race Condition in Canonical Apport

CVE-2025-5054 Vulnerability Detection Tool A Python tool to c...

4.7CVSS4.8AI score0.0003EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2025/06/01 5:50 p.m.5 views

CVE-2025-5054

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS6.1AI score0.0003EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2025/05/30 5:37 p.m.7 views

CVE-2025-5054 Race Condition in Canonical Apport

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS4.4AI score0.0003EPSS
Exploits2References3
CVE
CVE
added 2025/05/30 5:37 p.m.100 views

CVE-2025-5054

CVE-2025-5054 summary (Mode C) Affected software: Canonical Apport (Linux crash reporter) up to version 2.32.0. Vulnerability: A race condition in Apport’s crash handling logic allows a local attacker to leak sensitive information by abusing PID reuse and namespace/container handling. Specificall...

4.7CVSS6.1AI score0.0003EPSS
Exploits2References4Affected Software1
Cvelist
Cvelist
added 2025/05/30 5:37 p.m.33 views

CVE-2025-5054 Race Condition in Canonical Apport

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function checkglobalpidandforward, which detects if the crashing process resided in a container, was being called...

4.7CVSS0.0003EPSS
Exploits2References3
Qualys Blog
Qualys Blog
added 2025/05/29 5:16 p.m.58 views

Qualys TRU Discovers Two Local Information Disclosure Vulnerabilities in Apport and systemd-coredump: CVE-2025-5054 and CVE-2025-4598

The Qualys Threat Research Unit TRU has discovered two local information-disclosure vulnerabilities in Apport and systemd-coredump. Both issues are race-condition vulnerabilities. The first CVE-2025-5054 affects Ubuntu's core-dump handler, Apport , and the second CVE-2025-4598 targets...

4.7CVSS5.3AI score0.00112EPSS
Exploits3
Circl
Circl
added 2025/05/29 3:19 p.m.16 views

CVE-2025-5054

creationtimestamp| type| source ---|---|--- 2025-05-29 15:19:54+00:00| seen| https://seclists.org/oss-sec/2025/q2/183 2025-05-29 17:47:17+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lqdblrdkqb2g 2025-05-29 17:57:31+00:00| seen|...

4.7CVSS4.9AI score0.0003EPSS
Exploits2References60
Vulnrichment
Vulnrichment
added 2023/09/19 6:38 a.m.5 views

CVE-2023-5054 Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending

The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file that allows direct access. This makes it possible for unauthenticated attacker...

5.8CVSS6.6AI score0.00178EPSS
Exploits0References3
CVE
CVE
added 2023/09/19 6:38 a.m.41 views

CVE-2023-5054

The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation/relay due to insufficient restrictions on the sendMail.php file, affecting versions up to 6.9.3. This allows unauthenticated attackers to send emails via the vulnerable site’s server with arbitra...

5.8CVSS5.5AI score0.00178EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2023/09/19 12:0 a.m.11 views

WordPress Super Store Finder Plugin <= 6.9.3 is vulnerable to Broken Access Control

Software Super Store Finder Type Plugin Vulnerable versions = 6.9.3 Fixed in 6.9.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-5054 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 31fa9f5f6872 Credits Etharus Required...

5.8CVSS6.8AI score0.00178EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/26 12:0 a.m.22 views

Debian: Security Advisory (DSA-5054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS8AI score0.05673EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/08/31 12:0 a.m.24 views

Ubuntu: Security Advisory (USN-5054-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.7629EPSS
Exploits2References2
OSV
OSV
added 2021/08/30 7:55 p.m.2 views

USN-5054-1 uwsgi vulnerability

Felix Wilhelm discovered a buffer overflow flaw in the modproxyuwsgi module. An attacker could use this vulnerability to provoke an information disclosure or potentially remote code execution...

9.8CVSS7.2AI score0.7629EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2021/08/30 12:0 a.m.67 views

Ubuntu 18.04 LTS : uWSGI vulnerability (USN-5054-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5054-1 advisory. Felix Wilhelm discovered a buffer overflow flaw in the modproxyuwsgi module. An attacker could use this vulnerability to provoke an information disclosure or...

9.8CVSS7.4AI score0.7629EPSS
Exploits2References2
CVE
CVE
added 2021/01/05 6:42 p.m.25 views

CVE-2020-5054

CVE-2020-5054 is rejected/not used; this entry does not represent an active vulnerability.

6.7AI score
Exploits0
Circl
Circl
added 2019/09/13 12:42 p.m.2 views

CVE-2019-5054

creationtimestamp| type| source ---|---|--- 2019-09-13 12:42:43+00:00| seen| https://t.me/informationsecuritychannel/30963...

7.5CVSS7.3AI score0.11209EPSS
Exploits1References1
CVE
CVE
added 2019/09/11 9:9 p.m.67 views

CVE-2019-5054

The CVE is confirmed in NETGEAR N300 WNR2000v5 with firmware 1.0.0.70: an unauthenticated HTTP request containing an empty User-Agent to a page requiring authentication can trigger a null pointer dereference, crashing the HTTP server (DoS). TALOS-2019-0831 documents the flaw and notes firmware 1....

7.5CVSS7.6AI score0.11209EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2018/08/21 12:0 a.m.2 views

Reprise License Manager Arbitrary File Read Vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. An arbitrary file read vulnerability exists in Reprise RLM 12.2BL2 and earlier versions, which stems from the fact that by default, the web interface on port 5054 does not require authentication. The...

9.3CVSS7.2AI score0.00684EPSS
Exploits3References1
NVD
NVD
added 2018/08/20 2:29 a.m.8 views

CVE-2018-15573

An issue was discovered in Reprise License Manager RLM through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk as long as rlm.exe has access to it via /goform/editlfprocess with file content in the lfdata parameter and a pathname in the lf parameter. By...

9.3CVSS7AI score0.00684EPSS
Exploits3References2
Rows per page
Query Builder