Lucene search
+L

73 matches found

UbuntuCve
UbuntuCve
added 2017/01/27 12:00 a.m.34 views

CVE-2017-5485

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookupnsap...

9.8CVSS7.1AI score0.03198EPSS
SaveExploits0References3
NVD
NVD
added 2015/08/18 3:59 p.m.22 views

CVE-2015-5485

Cross-site scripting XSS vulnerability in the Event Import page import-eventbrite-events.php in the Modern Tribe Eventbrite Tickets plugin before 3.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "error" parameter to wp-admin/edit.php...

4.3CVSS5.8AI score0.02067EPSS
SaveExploits2References4
CVE
CVE
added 2015/08/18 3:00 p.m.45 views

CVE-2015-5485

Summary: CVE-2015-5485 is a reflected XSS in The Events Calendar: Eventbrite Tickets Plugin for WordPress by Modern Tribe. Affected software: WordPress plugin The Events Calendar: Eventbrite Tickets (versions before 3.10.2). Vulnerable component: Event Import page (import-eventbrite-events.php). ...

4.3CVSS6AI score0.02067EPSS
SaveExploits2References4Affected Software1
Packet Storm
Packet Storm
added 2015/07/14 12:00 a.m.46 views

The Events Calender: Eventbrite Tickets 3.9.6 Cross Site Scripting

Details ================ Software: The Events Calendar: Eventbrite Tickets Version: 3.9.6 Homepage: https://theeventscalendar.com/product/wordpress-eventbrite-tickets/ Advisory report:...

4.3CVSS0.1AI score0.02067EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2014/11/08 12:00 a.m.26 views

RHEL 5 : conga (RHSA-2014:1194)

Updated conga packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

6.8CVSS5.4AI score0.02666EPSS
SaveExploits0References20
NVD
NVD
added 2014/09/30 2:55 p.m.29 views

CVE-2012-5485

registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface...

6.8CVSS7AI score0.02085EPSS
SaveExploits0References5
CVE
CVE
added 2014/09/30 2:00 p.m.86 views

CVE-2012-5485

CVE-2012-5485 affects Plone (as part of conga/luci) where registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote code execution via the admin interface. Root cause is improper handling in the RestrictedPython sandbox when processing admin actions, enabling a remote attacke...

6.8CVSS7AI score0.02085EPSS
SaveExploits0References5Affected Software1
Cent OS
Cent OS
added 2014/09/30 11:21 a.m.89 views

luci, ricci security update

CentOS Errata and Security Advisory CESA-2014:1194 Updated conga packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVS...

6.8CVSS5.8AI score0.02666EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2014/09/16 5:28 a.m.38 views

Moderate: Red Hat Security Advisory: conga security and bug fix update

Updated conga packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

6.8CVSS5.8AI score0.02666EPSS
SaveExploits0References15
Circl
Circl
added 2008/04/22 12:00 a.m.7 views

CVE-2008-1954

creationtimestamp| type| source ---|---|--- 2008-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5485...

7.5CVSS5.8AI score0.01188EPSS
SaveExploits1References1
CVE
CVE
added 2007/10/16 11:00 p.m.54 views

CVE-2007-5485

CVE-2007-5485 affects the mg2 1.0 module for KwsPHP. The vulnerability is a SQL injection in index.php via the album parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the connected documents; no specific exploit status or in-the-wild ...

7.5CVSS8.4AI score0.01006EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2007/10/16 11:00 p.m.37 views

CVE-2007-5485

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter...

8.4AI score0.01006EPSS
SaveExploits1References4
CVE
CVE
added 2006/10/24 10:00 p.m.46 views

CVE-2006-5485

The CVE-2006-5485 entry concerns SpeedBerg 1.2beta1, which is vulnerable to multiple PHP remote file inclusion flaws. The underlying issue allows an attacker to supply a URL via the SPEEDBERG_PATH parameter to any of seven files (entrancePage.tpl.php, generalToolBox.tlb.php, myToolBox.tlb.php, sc...

7.5CVSS8AI score0.02691EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder