Lucene search
K

70 matches found

OSV
OSV
added 2026/05/11 2:4 p.m.1 views

MINI-5234-HG75-6H2H

Bulletin has no description...

5.3CVSS5.7AI score0.00009EPSS
Exploits0
Circl
Circl
added 2026/04/17 6:35 a.m.0 views

CVE-2026-5234

creationtimestamp| type| source ---|---|--- 2026-04-17 06:35:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjocmzk6ie2b 2026-04-17 10:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjopuy3kwk2r...

5.3CVSS5.7AI score0.00119EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.3 views

MiracleLinux 9 : firefox-102.9.0-3.el9.ML.1 (AXSA:2023-5234:12)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5234:12 advisory. Mozilla: Incorrect code generation during JIT compilation CVE-2023-25751 Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9...

8.8CVSS8.6AI score0.00156EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.6 views

MiracleLinux 4 : icedtea-web-1.6.2-1.0.1.AXS4 (AXSA:2016-504:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-504:01 advisory. The IcedTea-Web project provides a Java web browser plugin, an implementation of Java Web Start originally based on the Netx project and a settings...

6.8CVSS6AI score0.00938EPSS
Exploits0References3
OSV
OSV
added 2025/06/19 10:15 a.m.0 views

CVE-2025-5234

The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

5.4CVSS5.9AI score
Exploits0References5
Circl
Circl
added 2025/06/19 9:43 a.m.5 views

CVE-2025-5234

creationtimestamp| type| source ---|---|--- 2025-06-19 09:43:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18843 2025-06-19 13:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrxo263ccw2p...

6.4CVSS4.8AI score0.00176EPSS
Exploits0References2
CVE
CVE
added 2025/06/19 9:23 a.m.15 views

CVE-2025-5234

CVE-2025-5234 affects the Gutenverse News WordPress plugin (versions up to 1.0.4). It is a Stored Cross-Site Scripting vulnerability via the elementId parameter, exploitable by authenticated attackers with Contributor-level access or higher. The payload can cause arbitrary scripts to run on pages...

6.4CVSS5.7AI score0.00176EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 4:42 p.m.2 views

CVE-2020-5234

MessagePack for C and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps...

6.8CVSS6.6AI score0.00549EPSS
Exploits0
CVE
CVE
added 2023/11/22 3:33 p.m.77 views

CVE-2023-5234

The CVE-2023-5234 entry is valid and documented in Wordfence/WPVulndb sources as a stored XSS vulnerability in the Related Products for WooCommerce plugin for WordPress. Affected component: the woo-related shortcode within the plugin, vulnerable due to insufficient input sanitization and output e...

6.4CVSS5.2AI score0.00118EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2023/10/29 12:0 a.m.8 views

WordPress Related Products for WooCommerce Plugin <= 3.3.15 is vulnerable to Cross Site Scripting (XSS)

Software Related Products for WooCommerce Type Plugin Vulnerable versions = 3.3.15 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5234 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aaf8603a294c Credits István...

6.4CVSS5.8AI score0.00118EPSS
Exploits0References3Affected Software1
Cent OS
Cent OS
added 2022/08/02 7:21 p.m.1845 views

python security update

CentOS Errata and Security Advisory CESA-2022:5234 An update for python-virtualenv is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

7.5CVSS6.8AI score0.00622EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2022/06/29 12:0 a.m.16 views

Oracle Linux 7 : python-virtualenv (ELSA-2022-5234)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-5234 advisory. 15.1.0-7 - Security fix for CVE-2019-20916 for the bundled pip wheel Resolves: rhbz1868135 Tenable has extracted the preceding description block directly from t...

7.5CVSS7.4AI score0.00622EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/01/19 12:0 a.m.25 views

Ubuntu 16.04 ESM : Byobu vulnerability (USN-5234-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5234-1 advisory. Sander Bos discovered that Byobu incorrectly handled certain Apport data. An attacker could possibly use this issue to expose sensitive information. Tenable has...

7.5CVSS7.4AI score0.00308EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.51 views

RHEL 8 : firefox (RHSA-2020:5234)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5234 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

9.3CVSS7.6AI score0.04946EPSS
Exploits1References22
OSV
OSV
added 2020/01/31 6:15 p.m.7 views

CVE-2020-5234

MessagePack for C and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps...

6.5CVSS6.5AI score
Exploits0References4
Cvelist
Cvelist
added 2020/01/31 5:50 p.m.9 views

CVE-2020-5234 Untrusted data can lead to DoS attack in MessagePack for C# and Unity

MessagePack for C and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps...

4.8CVSS6.4AI score0.00549EPSS
Exploits0References4
CVE
CVE
added 2020/01/31 5:50 p.m.117 views

CVE-2020-5234

CVE-2020-5234 affects MessagePack for C# and Unity before version 1.9.11 and 2.1.90, where deserializing untrusted data can cause a DoS via hash collisions or stack overflow. The issue is documented across multiple sources (NVD, GitHub advisory GHSA-7Q36-4XX7-XCXF, Red Hat/RH entries, OSV) and is...

6.8CVSS5.6AI score0.00549EPSS
Exploits0References4Affected Software1
exploitpack
exploitpack
added 2018/05/02 12:0 a.m.46 views

Norton Core Secure WiFi Router - BLE Command Injection (PoC)

Norton Core Secure WiFi Router - BLE Command Injection PoC PoC command injection in BLE service of Norton Core Secure WiFi Router CVE-2018-5234 For more information read paper. To demonstrate the exploitation, we will use: - OS GNU/Linux; - Bluetooth dongle adapter; - BlueZ utility for testing...

8.3CVSS8.2AI score0.20911EPSS
Exploits4
Exploit DB
Exploit DB
added 2018/05/02 12:0 a.m.45 views

Norton Core Secure WiFi Router - &#039;BLE&#039; Command Injection (PoC)

PoC command injection in BLE service of Norton Core Secure WiFi Router CVE-2018-5234 For more information read paper. To demonstrate the exploitation, we will use: - OS GNU/Linux; - Bluetooth dongle adapter; - BlueZ utility for testing Bluetooth connection. In order to use the script, we will nee...

8.3CVSS7.9AI score0.20911EPSS
Exploits4
NVD
NVD
added 2018/04/30 6:29 p.m.17 views

CVE-2018-5234

The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software...

8.3CVSS8.3AI score0.20911EPSS
Exploits4References3
Rows per page
Query Builder