Lucene search
K

31 matches found

Circl
Circl
added 2025/12/03 11:59 p.m.3 views

CVE-2025-5518

creationtimestamp| type| source ---|---|--- 2025-12-03 23:59:39+00:00| seen| https://infosec.exchange/users/timbmachine/statuses/115658343985215542 2025-12-04 13:57:58+00:00| seen| https://mstdn.social/users/jschauma/statuses/115661647115099251 2025-12-04 18:02:24+00:00| seen|...

6.5CVSS4.8AI score0.00057EPSS
Exploits0References3
Circl
Circl
added 2025/02/14 10:3 a.m.0 views

CVE-2024-5518

creationtimestamp| type| source ---|---|--- 2025-02-14 10:03:08+00:00| seen| Telegram/FCpCY9W-tL9boIxdhZ0RVWtOS66JFOfkGbpkEiHMo3z0bNuP...

8.8CVSS6.2AI score0.0015EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2024/05/30 3:31 p.m.13 views

CVE-2024-5518 itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file changeprofilepicture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

6.5CVSS6.9AI score0.0015EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/05/30 3:31 p.m.17 views

CVE-2024-5518 itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file changeprofilepicture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

6.5CVSS6.5AI score0.0015EPSS
Exploits1References4
CVE
CVE
added 2024/05/30 3:31 p.m.49 views

CVE-2024-5518

The CVE-2024-5518 entry concerns itsourcecode Online Discussion Forum 1.0. The vulnerability lies in the file change_profile_picture.php where the image parameter can be manipulated to achieve unrestricted uploads. It can be triggered remotely, and public exploitation has been disclosed (VDB-2665...

8.8CVSS6.5AI score0.0015EPSS
Exploits1References4Affected Software1
Circl
Circl
added 2024/02/27 7:41 a.m.3 views

CVE-2012-5518

creationtimestamp| type| source ---|---|--- 2024-02-27 07:41:39+00:00| seen| https://t.me/ctinow/194056...

7.5CVSS7.3AI score0.0022EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/05 12:0 a.m.19 views

Debian DSA-5518-1 : libvpx - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5518 advisory. - VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. CVE-2023-44488 Note that Nessus has not tested for this issue but has instead...

7.5CVSS7.4AI score0.01446EPSS
Exploits0References6
F5 Networks
F5 Networks
added 2023/02/21 6:32 p.m.28 views

K03165684: vCMP vulnerability CVE-2018-5518

Security Advisory Description Malicious root users with access to a vCMP guest can disrupt service on adjacent vCMP guests running on the same host. Exploiting this vulnerability causes the vcmpd process on the adjacent vCMP guest to restart and produce a core file. This issue is only exploitable...

5.4CVSS5.4AI score0.00112EPSS
Exploits0Affected Software13
OpenVAS
OpenVAS
added 2022/07/15 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-5518-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.00076EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2022/07/14 12:0 a.m.142 views

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-5518-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5518-1 advisory. It was discovered that the eBPF implementation in the Linux kernel did not properly prevent writes to kernel objects in BPFBTFLOAD commands. A privileged...

7.8CVSS7AI score0.00076EPSS
Exploits2References7
CVE
CVE
added 2019/11/25 1:6 p.m.50 views

CVE-2012-5518

CVE-2012-5518 concerns Red Hat VDSM: certificate generation during node creation allows the daemon to start and serve requests from anyone with a matching key/certificate. The NVD entry lists a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N; 3.1: CVSS:3.1 base 7.5, HIGH impact on integrity) a...

7.5CVSS7.4AI score0.0022EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2019/04/01 8:39 p.m.130 views

CVE-2019-5518

CVE-2019-5518 concerns an out-of-bounds read/write in the virtual USB 1.1 UHCI for VMware products. A guest VM with a virtual USB controller can potentially execute code on the host. Affected: VMware ESXi (6.0/6.5/6.7), Workstation (14.x/15.x), and Fusion (10.x/11.x). Root cause: out-of-bounds ac...

7.2CVSS7.5AI score0.0009EPSS
Exploits0References4Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/04/01 12:0 a.m.71 views

VMSA-2019-0005 : VMware ESXi, Workstation and Fusion updates address multiple security issues

a. VMware ESXi, Workstation and Fusion UHCI out-of-bounds read/write and TOCTOU vulnerabilities VMware ESXi, Workstation and Fusion contain an out-of-bounds read/write vulnerability and a Time-of-check Time-of-use TOCTOU vulnerability in the virtual USB 1.1 UHCI Universal Host Controller Interfac...

9CVSS8AI score0.04076EPSS
Exploits0References6
VMware
VMware
added 2019/03/28 12:0 a.m.30 views

VMware ESXi, Workstation and Fusion updates address multiple security issues.

a. VMware ESXi, Workstation and Fusion UHCI out-of-bounds read/write and TOCTOU vulnerabilities VMware ESXi, Workstation and Fusion contain an out-of-bounds read/write vulnerability and a Time-of-check Time-of-use TOCTOU vulnerability in the virtual USB 1.1 UHCI Universal Host Controller Interfac...

9CVSS0.9AI score0.04076EPSS
Exploits0References5Affected Software3
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.25 views

F5 Networks BIG-IP : vCMP vulnerability (K03165684)

Malicious root users with access to a vCMP guest can disrupt service on adjacent vCMP guests running on the same host. Exploiting this vulnerability causes the vcmpd process on the adjacent vCMP guest to restart and produce a core file. This issue is only exploitable on a vCMP guest which is...

5.4CVSS5.7AI score0.00112EPSS
Exploits0References2
CVE
CVE
added 2018/05/02 1:0 p.m.49 views

CVE-2018-5518

CVE-2018-5518 affects F5 BIG-IP vCMP guests. A root user on a vCMP guest can disrupt services on adjacent vCMP guests on the same host, by triggering a restart of the adjacent guest’s vcmpd process and creating a core file. Exploitation is possible only when the vulnerable guest runs in host-only...

5.4CVSS5.2AI score0.00112EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2017/01/17 9:22 a.m.41 views

CVE-2017-5518

GeniXCMS media-file upload feature up to version 0.0.8 is affected by an SSRF vulnerability. The issue arises when the upload mechanism processes a URL, enabling remote attackers to fetch internal network resources (e.g., intranet addresses). The CVE description consistently states SSRF via a URL...

7.4CVSS7.3AI score0.00403EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2016/10/25 2:0 p.m.6 views

CVE-2016-5518

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices...

6.1AI score0.00658EPSS
Exploits0References2
CVE
CVE
added 2016/10/25 2:0 p.m.42 views

CVE-2016-5518

CVE-2016-5518: Unspecified vulnerability in Oracle Agile Engineering Data Management (Oracle Supply Chain Products Suite) versions 6.1.3.0 and 6.2.0.0, specifically in the webfileservices subcomponent. Remote attackers could impact confidentiality, integrity, and availability. Documented impact i...

8.1CVSS7.5AI score0.00658EPSS
Exploits0References2Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.32 views

Apache Geronimo <= 2.1.3 - Multiple Directory Traversal Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-018 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Directory Traversal File Upload Exploits: YES Reported: 10.12.2008 Vendor...

7.1AI score
Exploits0
Rows per page
Query Builder