Lucene search
K

100 matches found

OSV
OSV
added 2026/06/05 10:43 a.m.1 views

MINI-5489-75CM-3429

Bulletin has no description...

9.1CVSS6.1AI score0.00522EPSS
Exploits1
Circl
Circl
added 2026/01/17 1:23 a.m.3 views

CVE-2025-5489

creationtimestamp| type| source ---|---|--- 2026-01-17 01:23:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclhbf3snk2v...

5.8AI score
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-11816

Malware in sbrugna...

8.8CVSS8.8AI score0.02773EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-5489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors...

8.8CVSS7.9AI score0.01381EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/06/03 12:30 a.m.1 views

CVE-2025-5489

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.2AI score
Exploits0References1
OSV
OSV
added 2024/06/06 12:15 p.m.1 views

CVE-2024-5489

The Wbcom Designs – Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cfudeletecustomfont' function in all versions up to, and including, 2.3.4. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS5.8AI score0.00453EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/06/06 11:33 a.m.12 views

CVE-2024-5489 Wbcom Designs - Custom Font Uploader <= 2.3.4 - Missing Authorization to Font Deletion

The Wbcom Designs – Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cfudeletecustomfont' function in all versions up to, and including, 2.3.4. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS6.5AI score0.00453EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/06/06 12:0 a.m.10 views

WordPress Custom Font Uploader Plugin <= 2.3.4 is vulnerable to Broken Access Control

Software Custom Font Uploader Type Plugin Vulnerable versions = 2.3.4 Fixed in 2.4.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5489 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ec1d5e78e0ec Credits Lucio Sá Required privile...

4.3CVSS6.6AI score0.00453EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/04/27 12:0 a.m.23 views

RHEL 5 : kernel (RHSA-2019:2808)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2808 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Kernel: page cache side channel attacks...

5.5CVSS6.5AI score0.00774EPSS
Exploits1References4
Circl
Circl
added 2023/10/10 6:16 p.m.3 views

CVE-2023-5489

creationtimestamp| type| source ---|---|--- 2023-10-10 18:16:53+00:00| seen| https://t.me/cibsecurity/71952...

8.8CVSS6.9AI score0.0172EPSS
Exploits1References1
CVE
CVE
added 2023/10/10 2:31 p.m.58 views

CVE-2023-5489

CVE-2023-5489 affects the Beijing Baichuo/Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. A code/file-upload issue exists in /Tool/uploadfile.php where manipulating the file_upload argument allows unrestricted file upload, enabling remote initiation....

8.8CVSS7AI score0.0172EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/10 2:31 p.m.12 views

CVE-2023-5489 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload

A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. It is...

6.5CVSS8.7AI score0.0172EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/10/10 2:31 p.m.20 views

CVE-2023-5489 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted upload

A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. It is...

6.5CVSS8.9AI score0.0172EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/09/06 12:0 a.m.27 views

Debian DSA-5489-1 : file - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5489 advisory. - File before 5.43 has an stack-based buffer over-read in filecopystr in funcs.c. NOTE: File is the name of an Open Source project. CVE-2022-48554 Note that Nessus has not...

5.5CVSS7.1AI score0.00656EPSS
Exploits1References5
Oracle linux
Oracle linux
added 2023/04/04 12:0 a.m.58 views

Unbreakable Enterprise kernel security update

4.1.12-124.73.2 - netfilter: nftables: fix null deref due to zeroed list head Florian Westphal Orabug: 35181628 CVE-2023-1095 - sctp: fail if no bound addresses can be used for a given scope Marcelo Ricardo Leitner Orabug: 35181461 CVE-2023-1074 - HID: check empty reportlist in hidvalidatevalues...

6.6CVSS7.1AI score0.01003EPSS
Exploits1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.36 views

SUSE: Security Advisory (SUSE-SU-2019:14089-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.98745EPSS
Exploits6References21
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2019:1535-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.7AI score0.98745EPSS
Exploits9References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2019:1529-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.7AI score0.98745EPSS
Exploits9References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2019:1534-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.8AI score0.98745EPSS
Exploits10References23
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2019:1536-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.1AI score0.98745EPSS
Exploits9References148
Rows per page
Query Builder