Lucene search
K

119 matches found

Circl
Circl
added 2026/04/29 6:15 a.m.1 views

CVE-2011-5240

creationtimestamp| type| source ---|---|--- 2026-04-29 06:15:09+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mkmh4k2n3a25...

5.8CVSS4.8AI score0.00185EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/31 11:45 p.m.0 views

CVE-2026-5240

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /adminstate.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS4.2AI score0.00013EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/24 2:24 a.m.5 views

CVE-2025-5240

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.5AI score0.00203EPSS
Exploits0References1
CVE
CVE
added 2025/07/22 1:44 a.m.18 views

CVE-2025-5240

The CVE-2025-5240 entry applies to the WordPress plugin CRM and Lead Management by vcita, affected up to version 2.7.5. It describes a Stored Cross-Site Scripting (XSS) vulnerability via the type parameter that authenticated attackers with Contributor-level access and above can exploit to inject ...

6.4CVSS5.6AI score0.00203EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/07/22 1:44 a.m.5 views

CVE-2025-5240 CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00203EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/07/22 1:44 a.m.7 views

CVE-2025-5240 CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.9AI score0.00203EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/07/21 10:0 p.m.4 views

WordPress CRM and Lead Management by vcita plugin <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via type Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin CRM and Lead Management by vcita versions = 2.7.5...

6.4CVSS5.6AI score0.00203EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 5:6 a.m.4 views

CVE-2023-5240

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request...

7.5CVSS6.6AI score0.00232EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 1:52 a.m.5 views

CVE-2011-5240

Magento 1.5 and 1.6.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

5.8CVSS6.9AI score0.00185EPSS
Exploits0References1
OSV
OSV
added 2024/05/23 7:15 a.m.0 views

CVE-2024-5240

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS5.8AI score0.00213EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/05/23 6:31 a.m.14 views

CVE-2024-5240 Campcodes Complete Web-Based School Management System unread_msg.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS7.4AI score0.00213EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/04/24 12:0 a.m.16 views

RHEL 6 / 7 : openstack-neutron (RHSA-2015:1909)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1909 advisory. OpenStack Networking neutron is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main...

3.5CVSS7.4AI score0.00128EPSS
Exploits0References7
Circl
Circl
added 2023/10/13 4:28 p.m.1 views

CVE-2023-5240

creationtimestamp| type| source ---|---|--- 2023-10-13 16:28:56+00:00| seen| https://t.me/cibsecurity/72230...

7.5CVSS7.3AI score0.00232EPSS
Exploits0References1
CVE
CVE
added 2023/10/13 12:22 p.m.37 views

CVE-2023-5240

CVE-2023-5240 concerns Devolutions Server (versions 2023.2.8.0 and earlier) with improper access control in PAM propagation scripts. The root cause, per Red Hat and other sources, is that an attacker with permission to manage PAM propagation scripts can retrieve passwords stored in those scripts ...

7.5CVSS7.3AI score0.00232EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/09/14 7:15 p.m.6 views

CVE-2013-5240

Rejected reason: This candidate is unused by its CNA...

6.6AI score
Exploits0
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.22 views

Debian: Security Advisory (DLA-547)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7.6AI score0.01408EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/01/20 12:0 a.m.155 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerability (USN-5240-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5240-1 advisory. William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow...

8.4CVSS7.4AI score0.018EPSS
Exploits11References2
Packet Storm
Packet Storm
added 2021/01/25 12:0 a.m.239 views

Backdoor.Win32.Wollf.16 Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5f79b779acd4c9c75211835a2783bccb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.16 Vulnerability: Weak Hardcoded Password Description: Wollf.16 creates and run...

Exploits0
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.54 views

RHEL 8 : thunderbird (RHSA-2020:5240)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5240 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.5.0. Security Fixes: Mozilla:...

9.3CVSS7.6AI score0.04946EPSS
Exploits1References22
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/19 12:49 a.m.26 views

Security Bulletin: OpenStack vulnerabilities affect IBM SmartCloud Entry(CVE-2015-5240 CVE-2015-3280)

Summary IBM SmartCloud Entry is vulnerable to a Nova vulnerability that allows a remote authenticated attacker to cause a denial of service. IBM SmartCloud Entry is vulnerable to a Neutron vulnerability that allows an attacker to bypass firewall rules and gain access to applications. Vulnerabilit...

6.8CVSS1.6AI score0.00795EPSS
Exploits0Affected Software1
Rows per page
Query Builder