Lucene search
K

103 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-5108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify...

8.8CVSS6.8AI score0.0043EPSS
Exploits0References2
Circl
Circl
added 2025/05/27 2:48 p.m.1 views

CVE-2025-5108

creationtimestamp| type| source ---|---|--- 2025-05-27 14:48:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17641...

9.8CVSS4.8AI score0.00301EPSS
Exploits0References1
OSV
OSV
added 2025/05/23 1:15 p.m.1 views

CVE-2025-5108

A vulnerability was found in zongzhige ShopXO 6.5.0. It has been rated as critical. This issue affects the function Upload of the file app/admin/controller/Payment.php of the component ZIP File Handler. The manipulation of the argument params leads to unrestricted upload. The attack may be...

9.8CVSS6.4AI score
Exploits0References4
NVD
NVD
added 2025/05/23 1:15 p.m.11 views

CVE-2025-5108

A vulnerability was found in zongzhige ShopXO 6.5.0. It has been rated as critical. This issue affects the function Upload of the file app/admin/controller/Payment.php of the component ZIP File Handler. The manipulation of the argument params leads to unrestricted upload. The attack may be...

9.8CVSS0.00301EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/05/23 12:31 p.m.8 views

CVE-2025-5108 zongzhige ShopXO ZIP File Payment.php Upload unrestricted upload

A vulnerability was found in zongzhige ShopXO 6.5.0. It has been rated as critical. This issue affects the function Upload of the file app/admin/controller/Payment.php of the component ZIP File Handler. The manipulation of the argument params leads to unrestricted upload. The attack may be...

6.5CVSS0.00301EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 4:30 a.m.4 views

CVE-2023-5108

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

7.2CVSS7.4AI score0.01314EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:48 a.m.5 views

CVE-2010-5108

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...

7.5CVSS6.7AI score0.00311EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/20 12:0 a.m.9 views

CVE-2024-5108 Campcodes Complete Web-Based School Management System student_payment_details4.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/studentpaymentdetails4.php. The manipulation of the argument index leads to sql injection. It is possible to launch the atta...

6.5CVSS7.4AI score0.00157EPSS
Exploits1References4
Circl
Circl
added 2024/03/16 3:21 p.m.0 views

CVE-2019-5108

creationtimestamp| type| source ---|---|--- 2024-03-16 15:21:21+00:00| seen| https://t.me/ctinow/209580...

7.4CVSS7AI score0.00757EPSS
Exploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.1 views

Malicious code in wlwz-2312-5108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 191cf132bfeab6a3b4b89a0c9a8002a00e28f75d55685e2e8438aeb21f59d362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Circl
Circl
added 2023/12/23 10:21 a.m.1 views

CVE-2023-5108

creationtimestamp| type| source ---|---|--- 2023-12-23 10:21:47+00:00| seen| https://t.me/ctinow/158756...

7.2CVSS7AI score0.01314EPSS
Exploits2References1
CVE
CVE
added 2023/12/04 9:29 p.m.40 views

CVE-2023-5108

CVE-2023-5108 affects the WordPress plugin “Easy Newsletter Signups” (versions up to 1.0.4). The root cause is improper sanitisation/escaping of a parameter used in a SQL statement, resulting in a SQL injection. The vulnerability is exploitable by high-privilege users such as admin, with the pote...

7.2CVSS7.2AI score0.01314EPSS
Exploits2References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.18 views

Ubuntu 16.04 ESM : Libntlm vulnerability (USN-5108-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5108-2 advisory. USN-5108-1 fixed a vulnerability in Libntlm. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

9.8CVSS8.2AI score0.07078EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:51 a.m.2 views

SUSE CVE-2017-5108

Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file...

8.8CVSS8.8AI score0.0043EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2023/01/27 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-5108-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.07078EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.24 views

Ubuntu: Security Advisory (USN-4287-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.04499EPSS
Exploits8References2
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.19 views

Slackware: Security Advisory (SSA:2020-086-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.7AI score0.0467EPSS
Exploits13References2
OpenVAS
OpenVAS
added 2022/03/26 12:0 a.m.23 views

Debian: Security Advisory (DSA-5108-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS6.9AI score0.00206EPSS
Exploits9References4
Tenable Nessus
Tenable Nessus
added 2022/03/25 12:0 a.m.66 views

Debian DSA-5108-1 : tiff - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5108 advisory. Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service if malformed image files a...

7.7CVSS6.7AI score0.00206EPSS
Exploits9References22
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2016-0221)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.20819EPSS
Exploits1References5
Rows per page
Query Builder