Lucene search
K

135 matches found

Nuclei
Nuclei
added 10 hours ago17 views

WordPress Events Calendar 6.8.2.1 - Information Disclosure

The Events Calendar WordPress plugin 6.8.2.1 contains missing access checks in the REST API, letting unauthenticated users access information about password protected events, exploit requires no authentication. id: CVE-2024-5333 info: name: WordPress Events Calendar 6.8.2.1 - Information Disclosu...

5.3CVSS7.3AI score0.10972EPSS
Exploits1References2
OSV
OSV
added 2026/04/11 4:16 p.m.0 views

MINI-2CWC-5333-P5M6

Bulletin has no description...

7.5CVSS5.7AI score0.00021EPSS
Exploits0
Circl
Circl
added 2026/04/02 2:4 p.m.2 views

CVE-2026-5333

creationtimestamp| type| source ---|---|--- 2026-04-02 14:04:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijeqgfei427 2026-04-02 15:21:36+00:00| seen| Telegram/c85hrsWNyFYwFes4s7T57trjOQm7U5y5MEbFlOtoT8A7NA 2026-04-08 05:40:09+00:00| seen|...

9.8CVSS7.1AI score0.00286EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/02 1:30 p.m.2 views

CVE-2026-5333

A security flaw has been discovered in DefaultFuction Content-Management-System 1.0. This issue affects some unknown processing of the file /admin/tools.php. The manipulation of the argument host results in command injection. The attack can be executed remotely. The exploit has been released to t...

7.5CVSS6.8AI score0.00286EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-5174

Malware in sbrugna...

10CVSS6.1AI score0.08291EPSS
Exploits3References2
NVD
NVD
added 2025/07/06 2:15 p.m.4 views

CVE-2025-5333

Remote attackers can execute arbitrary code in the context of the vulnerable service process...

9.5CVSS0.01675EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/06 1:50 p.m.7 views

CVE-2025-5333 Unauthenticated Remote Code Execution in IT Management Suite

Remote attackers can execute arbitrary code in the context of the vulnerable service process...

9.5CVSS0.01675EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/07/06 1:50 p.m.5 views

CVE-2025-5333 Unauthenticated Remote Code Execution in IT Management Suite

Remote attackers can execute arbitrary code in the context of the vulnerable service process...

9.5CVSS8AI score0.01675EPSS
Exploits0References1
CVE
CVE
added 2025/07/06 1:50 p.m.43 views

CVE-2025-5333

CVE-2025-5333 affects Broadcom Symantec Altiris IT/endpoint management (IRM) via the legacy .NET Remoting endpoint at tcp://:4011/IRM/HostedService. Unauthenticated RCE is possible because BinaryServerFormatterSinkProvider with TypeFilterLevel=Full deserializes input from the TCP channel. Affecte...

9.5CVSS7.5AI score0.01675EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:22 a.m.4 views

CVE-2024-5333

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events...

5.3CVSS6.8AI score0.10972EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:7 a.m.5 views

CVE-2023-5333

Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs...

6.5CVSS6.8AI score0.00118EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 2:49 a.m.7 views

CVE-2010-5333

The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is t...

9.8CVSS8.3AI score0.77016EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-5333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 4.14.13, the rdscmsgatomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied,...

5.5CVSS6.1AI score0.02801EPSS
Exploits5References3
NVD
NVD
added 2024/12/16 6:15 a.m.9 views

CVE-2024-5333

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events...

5.3CVSS0.10972EPSS
Exploits1References1
Circl
Circl
added 2024/12/16 6:4 a.m.4 views

CVE-2024-5333

creationtimestamp| type| source ---|---|--- 2024-12-16 06:04:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113660989254789625 2024-12-16 08:08:38+00:00| seen| https://t.me/cvedetector/12960 2026-01-29 21:02:29+00:00| seen|...

5.3CVSS8.7AI score0.10972EPSS
Exploits1References3
CVE
CVE
added 2024/12/16 6:0 a.m.101 views

CVE-2024-5333

The Events Calendar WordPress plugin (vendor: stellarwp) before version 6.8.2.1 has missing access checks in its REST API, allowing unauthenticated users to access information about password-protected events. The NVD/Nuclei and related sources confirm this information disclosure vector with explo...

5.3CVSS6.5AI score0.10972EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/12/16 6:0 a.m.16 views

CVE-2024-5333 The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure

The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in the REST API, allowing for unauthenticated users to access information about password protected events...

0.10972EPSS
Exploits1References1
Circl
Circl
added 2023/10/09 2:15 p.m.2 views

CVE-2023-5333

creationtimestamp| type| source ---|---|--- 2023-10-09 14:15:53+00:00| seen| https://t.me/cibsecurity/71821...

6.5CVSS6.3AI score0.00118EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/10/09 10:41 a.m.13 views

CVE-2023-5333 Denial of Service via multiple identical User IDs in /api/v4/users/ids

Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs...

4.3CVSS6.8AI score0.00118EPSS
Exploits0References1
CVE
CVE
added 2023/10/09 10:41 a.m.57 views

CVE-2023-5333

Mattermost’s /api/v4/users/ids endpoint is vulnerable to Denial of Service due to failure to deduplicate multiple identical IDs in a request. This can allow an authenticated user to cause high resource usage or a potential crash by submitting a crafted payload with many identical IDs. Root cause:...

6.5CVSS5.3AI score0.00118EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder