Lucene search
K

113 matches found

OSV
OSV
added 2026/05/11 1:47 p.m.0 views

MINI-5257-H7WF-WHXG

Bulletin has no description...

7.5CVSS5.7AI score0.00054EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/04/02 10:53 a.m.1 views

CVE-2026-5257

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

9.8CVSS6.9AI score0.00043EPSS
Exploits1References1
Circl
Circl
added 2026/04/01 7:15 a.m.0 views

CVE-2026-5257

creationtimestamp| type| source ---|---|--- 2026-04-01 07:15:40+00:00| published-proof-of-concept| Telegram/PyNQtULQpgHoLf2PKswMvEDbaboZwTfs0uqYxCbwNT3ZRI 2026-04-01 09:00:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migdcvopxx25 2026-04-04 23:40:08+00:00| seen|...

9.8CVSS7.3AI score0.00043EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:30 a.m.7 views

CVE-2024-5257

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with admincomplianceframework custom role may have been able to modify the URL for a group namespace...

4.9CVSS6.6AI score0.00027EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:31 a.m.2 views

CVE-2023-5257

A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Windows. It has been rated as problematic. Affected by this issue is the function handleFileRequest of the file src/main/java/com/feihong/ldap/HTTPServer.java. The manipulation leads to path traversal. The exploit has been disclosed to the...

5.7CVSS6.8AI score0.00032EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2015-5257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service NULL pointer dereference and...

5CVSS7.2AI score0.01902EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 3:44 p.m.8 views

CVE-2020-5257

In Administrate rubygem before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated into the SQL query. This could present a SQL injection if the attacker were able to modify the direction parameter and bypass ActiveRecord...

8.1CVSS7.5AI score0.00186EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.18 views

CentOS 6 : firefox (RHSA-2020:5257)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5257 advisory. - Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted...

9.3CVSS7.9AI score0.04946EPSS
Exploits1References11
Circl
Circl
added 2024/07/11 9:57 a.m.2 views

CVE-2024-5257

creationtimestamp| type| source ---|---|--- 2024-07-11 09:57:28+00:00| seen| https://t.me/cvedetector/644 2024-07-11 12:00:06+00:00| seen| https://t.me/truesecator/5957 2025-12-28 15:43:51+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mb2nyzfti22d...

4.9CVSS5.1AI score0.00027EPSS
Exploits0References3
NVD
NVD
added 2024/07/11 7:15 a.m.21 views

CVE-2024-5257

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with admincomplianceframework custom role may have been able to modify the URL for a group namespace...

4.9CVSS0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/07/11 6:57 a.m.16 views

CVE-2024-5257 Improper Access Control in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with admincomplianceframework custom role may have been able to modify the URL for a group namespace...

4.9CVSS6.8AI score0.00027EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/11 6:57 a.m.25 views

CVE-2024-5257 Improper Access Control in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with admincomplianceframework custom role may have been able to modify the URL for a group namespace...

4.9CVSS0.00027EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2024/07/11 3:51 a.m.65 views

GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Jobs

GitLab has shipped another round of updates to close out security flaws in its software development platform, including a critical bug that allows an attacker to run pipeline jobs as an arbitrary user. Tracked as CVE-2024-6385, the vulnerability carries a CVSS score of 9.6 out of a maximum of 10....

9.8CVSS8.4AI score0.87092EPSS
Exploits0
Circl
Circl
added 2024/03/12 9:41 a.m.3 views

CVE-2019-5257

creationtimestamp| type| source ---|---|--- 2024-03-12 09:41:36+00:00| seen| https://t.me/ctinow/205430...

5.5CVSS5.5AI score0.00057EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.32 views

Ubuntu 20.04 ESM / 22.04 ESM : ldns vulnerabilities (USN-5257-2)

The remote Ubuntu 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5257-2 advisory. USN-5257-1 fixed several vulnerabilities in ldns. This update provides the corresponding update for Ubuntu 20.04 ESM and Ubuntu 22.04 ESM...

7.5CVSS7.7AI score0.00366EPSS
Exploits2References3
Circl
Circl
added 2023/09/29 2:37 p.m.1 views

CVE-2023-5257

creationtimestamp| type| source ---|---|--- 2023-09-29 14:37:35+00:00| seen| https://t.me/cibsecurity/71278...

5.7CVSS4.6AI score0.00032EPSS
Exploits1References1
CVE
CVE
added 2023/09/29 10:31 a.m.48 views

CVE-2023-5257

CVE-2023-5257 affects WhiteHSBG JNDIExploit 1.4 on Windows, where path traversal is caused by the handleFileRequest function in src/main/java/com/feihong/ldap/HTTPServer.java. Exploitation details are publicly disclosed across sources, indicating attackers can access files outside the web root. D...

5.7CVSS4.5AI score0.00032EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/29 10:31 a.m.11 views

CVE-2023-5257 WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal

A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Windows. It has been rated as problematic. Affected by this issue is the function handleFileRequest of the file src/main/java/com/feihong/ldap/HTTPServer.java. The manipulation leads to path traversal. The exploit has been disclosed to the...

3.5CVSS6.8AI score0.00032EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.24 views

Debian: Security Advisory (DLA-325-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.9AI score0.00747EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/01/27 12:0 a.m.15 views

Ubuntu: Security Advisory (USN-5257-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.00366EPSS
Exploits2References2
Rows per page
Query Builder