Lucene search
K

134 matches found

OSV
OSV
added 2026/03/27 5:17 p.m.0 views

CGA-2GP2-5252-R938

Bulletin has no description...

5.8AI score
Exploits0
GithubExploit
GithubExploit
added 2026/02/19 1:23 p.m.131 views

Exploit for CVE-2026-5252

CVE-2026-...

5.4AI score0.00011EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 4 : samba4-4.0.0-67.AXS4.rc4 (AXSA:2016-012:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-012:01 advisory. Samba is the standard Windows interoperability suite of programs for Linux and Unix. Security issues fixed with this release: CVE-2015-3223 The...

7.5CVSS6.7AI score0.39597EPSS
Exploits1References6
OSV
OSV
added 2025/09/14 8:1 p.m.1 views

MINI-9PMC-W5G8-5252

Bulletin has no description...

6.1CVSS9.4AI score0.00119EPSS
Exploits0
OSV
OSV
added 2025/08/23 10:47 a.m.1 views

CGA-5252-W8W6-48WX

Bulletin has no description...

6.8CVSS7.2AI score0.00124EPSS
Exploits0
OSV
OSV
added 2025/05/27 6:15 p.m.0 views

CVE-2025-5252

A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.8AI score0.00187EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/27 5:31 p.m.7 views

CVE-2025-5252 PHPGurukul News Portal Project edit-subadmin.php sql injection

A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS7.6AI score0.00187EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/27 5:31 p.m.10 views

CVE-2025-5252 PHPGurukul News Portal Project edit-subadmin.php sql injection

A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS0.00187EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 10:30 a.m.6 views

CVE-2019-5252

There is an improper authentication vulnerability in Huawei smartphones Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro. The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant...

3.6CVSS7AI score0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:36 a.m.3 views

CVE-2010-5252

Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file. NOTE: some of these details are obtained from third party information...

6.9CVSS6.8AI score0.00057EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2015-5252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allow...

7.2CVSS6.9AI score0.17333EPSS
Exploits1References2
Circl
Circl
added 2024/07/17 9:51 a.m.0 views

CVE-2024-5252

creationtimestamp| type| source ---|---|--- 2024-07-17 09:51:31+00:00| seen| https://t.me/cvedetector/1057...

6.4CVSS4.8AI score0.00222EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/17 6:45 a.m.16 views

CVE-2024-5252 Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimateinfotable shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS0.00222EPSS
Exploits0References2
Circl
Circl
added 2024/03/12 9:41 a.m.0 views

CVE-2019-5252

creationtimestamp| type| source ---|---|--- 2024-03-12 09:41:31+00:00| seen| https://t.me/ctinow/205425...

3.6CVSS4.6AI score0.0005EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:0 a.m.34 views

CentOS 8 : dmidecode (CESA-2023:5252)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:5252 advisory. - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausibl...

7.1CVSS6.3AI score0.00047EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/10/30 1:48 p.m.5 views

CVE-2023-5252 FareHarbor for WordPress <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The FareHarbor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.6.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level...

6.4CVSS6.8AI score0.00118EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/10/30 1:48 p.m.15 views

CVE-2023-5252 FareHarbor for WordPress <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The FareHarbor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.6.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level...

6.4CVSS5.8AI score0.00118EPSS
Exploits0References3
CVE
CVE
added 2023/10/30 1:48 p.m.74 views

CVE-2023-5252

CVE-2023-5252 affects FareHarbor for WordPress: Stored XSS via shortcode attributes in versions up to 3.6.7. Root cause: insufficient input sanitization and output escaping on user-supplied attributes. Impact per sources: authenticated users with contributor+ could inject scripts; CVSS ~6.4 (Medi...

6.4CVSS5.2AI score0.00118EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/09/22 12:0 a.m.19 views

AlmaLinux 8 : dmidecode (ALSA-2023:5252)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:5252 advisory. - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible...

7.1CVSS6.3AI score0.00047EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/09/20 12:0 a.m.18 views

Oracle Linux 8 : dmidecode (ELSA-2023-5252)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-5252 advisory. 1:3.3-4.1 - Resolves: CVE-2023-30630 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

7.1CVSS6.2AI score0.00047EPSS
Exploits1References2
Rows per page
Query Builder