Lucene search
K

43 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-5490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the theme-name fallback functionality in wp-includes/class-wp- theme.php in WordPress before 4.7.1 allows remote...

6.1CVSS7.2AI score0.01307EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/06/19 8:1 a.m.5 views

WordPress Football Pool plugin <= 2.12.4 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Football Pool versions = 2.12.4...

5.5CVSS5.5AI score0.00162EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2025/06/19 5:42 a.m.3 views

CVE-2025-5490

creationtimestamp| type| source ---|---|--- 2025-06-19 05:42:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18840 2025-06-19 09:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrxadqhpjx2i...

5.5CVSS4.8AI score0.00162EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 6:21 a.m.2 views

CVE-2024-5490

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option...

8.8CVSS7.7AI score0.01217EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/08/28 12:0 a.m.27 views

ManageEngine ADAudit Plus < Build 8000 Multiple Vulnerabilities

The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8000. It is, therefore, affected by multiple vulnerabilities. - Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module. CVE-2024-5556 -...

8.8CVSS5.8AI score0.01217EPSS
Exploits0References12
Circl
Circl
added 2024/08/23 5:7 p.m.1 views

CVE-2024-5490

creationtimestamp| type| source ---|---|--- 2024-08-23 17:07:49+00:00| seen| https://t.me/cvedetector/3984...

8.8CVSS4.8AI score0.01217EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/23 1:44 p.m.10 views

CVE-2024-5490 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option...

8.3CVSS0.01217EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/23 1:44 p.m.11 views

CVE-2024-5490 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option...

8.3CVSS7.7AI score0.01217EPSS
Exploits0References1
Circl
Circl
added 2023/10/10 6:16 p.m.0 views

CVE-2023-5490

creationtimestamp| type| source ---|---|--- 2023-10-10 18:16:39+00:00| seen| https://t.me/cibsecurity/71940...

8.8CVSS6.9AI score0.00637EPSS
Exploits1References1
OSV
OSV
added 2023/10/10 3:15 p.m.0 views

CVE-2023-5490

A vulnerability classified as critical was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This vulnerability affects unknown code of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted uploa...

8.8CVSS5.4AI score0.00637EPSS
Exploits1References4
CVE
CVE
added 2023/10/10 3:0 p.m.59 views

CVE-2023-5490

CVE-2023-5490 affects the Beijing Baichuo/Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230928). The vulnerability resides in the /useratte/userattestation.php file, where manipulating the web_img argument enables unrestricted file upload, with remote exp...

8.8CVSS7.6AI score0.00637EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/09/06 12:0 a.m.23 views

Debian DSA-5490-1 : aom - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5490 advisory. - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1dxiface.c. CVE-2020-36130 - AOM v2.0.1 was discovered to contain a stac...

9.8CVSS8.1AI score0.00247EPSS
Exploits4References17
Tenable Nessus
Tenable Nessus
added 2022/06/22 12:0 a.m.37 views

Ubuntu 16.04 ESM : Protocol Buffers vulnerability (USN-5490-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5490-1 advisory. It was discovered that Protocol Buffers did not properly parse certain symbols. An attacker could possibly use this issue to cause a denial of service or other...

6.5CVSS6.6AI score0.00138EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/01/25 5:53 p.m.12 views

CVE-2020-5490

...

Exploits0
CVE
CVE
added 2021/01/25 5:53 p.m.23 views

CVE-2020-5490

CVE-2020-5490 entry is rejected/not used per the Initial Description.

6.9AI score
Exploits0
Lenovo
Lenovo
added 2019/04/17 2:11 p.m.18 views

Default Privileged Account Vulnerability in the NetApp Service Processor - Lenovo Support US

No description provided...

10CVSS9.5AI score0.01103EPSS
Exploits0
Lenovo
Lenovo
added 2019/04/17 2:11 p.m.55 views

Default Privileged Account Vulnerability in the NetApp Service Processor - US

Lenovo Security Advisory: LEN-26771 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5490 Summary Description: Certain versions of the NetApp Service Processor firmware were shipped with a default account enabled that could allow...

10CVSS3.6AI score0.01103EPSS
Exploits0
CVE
CVE
added 2019/03/21 6:25 p.m.50 views

CVE-2019-5490

CVE-2019-5490 affects NetApp Service Processor firmware 2.x–5.x, shipped with a default account enabled, enabling unauthorized command execution. The issue is tied to the default-privilege account and is documented by NetApp/Lenovo advisories; affected platforms may include the listed models, req...

10CVSS9.5AI score0.01103EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/08/03 7:29 p.m.11 views

CVE-2018-5490

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

8.8CVSS8.6AI score0.00303EPSS
Exploits0References1
CVE
CVE
added 2018/08/03 7:0 p.m.65 views

CVE-2018-5490

NetApp Data ONTAP 8.3 RC releases are affected by CVE-2018-5490 where read-only export policy rules were not correctly enforced, potentially allowing more than read-only access via authenticated SMBv2/v3 clients. The issue has been resolved in the GA 8.3 release; customers running RCs should upda...

8.8CVSS8.4AI score0.00303EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder