Lucene search
K

78 matches found

RedhatCVE
RedhatCVE
added 2026/04/06 5:0 p.m.2 views

CVE-2026-5471

A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument currentkey results in use of hard-coded cryptographi...

4.8CVSS5.5AI score0.00005EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 3:53 p.m.7 views

CVE-2025-5471

CVE-2025-5471 affects Yandex Telemost on macOS, before version 2.19.1. The root cause is an uncontrolled Search Path Element, enabling search-order hijacking (dylib hijacking). Impact per sources is high on confidentiality, integrity, and availability when a malicious library is loaded via a mani...

8.8CVSS6.6AI score0.00018EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-4523

Malware in sbrugna...

5.5CVSS5.7AI score0.00175EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-5471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of thes...

9.8CVSS8.4AI score0.00564EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:30 a.m.7 views

CVE-2019-5471

An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was addressed in GitLab 12.1.2, 12.0.4, and 11.11.6...

5.4CVSS6.4AI score0.00069EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2014-5471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack consumption vulnerability in the parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a...

4CVSS6.7AI score0.00117EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/02/05 6:28 a.m.3 views

CVE-2024-5471

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

9.8CVSS6.8AI score0.07215EPSS
Exploits0References1
Circl
Circl
added 2024/07/17 2:2 p.m.1 views

CVE-2024-5471

creationtimestamp| type| source ---|---|--- 2024-07-17 14:02:33+00:00| seen| https://t.me/cvedetector/1077...

9.8CVSS4.8AI score0.07215EPSS
Exploits0References1
CVE
CVE
added 2023/10/10 1:0 a.m.37 views

CVE-2023-5471

Affected software: codeprojects Farmacia 1.0. The vulnerability is in an unknown function of index.php where the usario/senha parameter is manipulated to cause SQL injection. The issue can be exploited remotely and exploitation details have been disclosed. The available documents do not specify a...

7.5CVSS7AI score0.00103EPSS
Exploits1References3Affected Software1
RedHat Linux
RedHat Linux
added 2022/06/30 11:24 p.m.41 views

Important: Red Hat Security Advisory: php:7.4 security update

An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.8CVSS7.6AI score0.1024EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2021/11/08 12:0 a.m.21 views

Mozilla Firefox Security Advisory (MFSA2017-15) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

9.8CVSS7.8AI score0.01874EPSS
Exploits12References24
Cvelist
Cvelist
added 2021/01/25 5:53 p.m.8 views

CVE-2020-5471

...

Exploits0
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.39 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1536)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.2AI score0.25699EPSS
Exploits16References2
NVD
NVD
added 2019/09/09 6:15 p.m.11 views

CVE-2019-5471

An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was addressed in GitLab 12.1.2, 12.0.4, and 11.11.6...

5.4CVSS5.1AI score0.00069EPSS
Exploits1References3
Cvelist
Cvelist
added 2019/09/09 5:47 p.m.16 views

CVE-2019-5471

An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was addressed in GitLab 12.1.2, 12.0.4, and 11.11.6...

5.1AI score0.00069EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2019/09/09 5:47 p.m.19 views

CVE-2019-5471

Removed by vendor...

5.4CVSS6AI score0.00069EPSS
Exploits1
CVE
CVE
added 2019/09/09 5:47 p.m.53 views

CVE-2019-5471

CVE-2019-5471 concerns an input validation and output encoding flaw in GitLab’s email notification feature that could yield a persistent XSS. The issue affects GitLab’s email notifications (notably in merge-request and repository push emails) where unsanitized values (e.g., branch names) could be...

5.4CVSS5.1AI score0.00069EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2018/06/11 9:0 p.m.75 views

CVE-2017-5471

Summary (CVE-2017-5471): Firefox

9.8CVSS9.7AI score0.00564EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2018/05/17 3:29 p.m.16 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS6.2AI score0.0019EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2018/05/17 3:0 p.m.44 views

CVE-2018-9946

Foxit Reader 9.0.0.29935 is affected by CVE-2018-9946 due to a setTimeOut handling flaw where code executes without validating the existence of an object before operations. This can disclose sensitive information; exploitation requires user interaction (visit a malicious page or open a malicious ...

6.5CVSS6.5AI score0.0019EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder