Lucene search
+L

175 matches found

Circl
Circl
added 2025/08/01 4:45 p.m.10 views

RHSA-2023:5548

creationtimestamp| type| source ---|---|--- 2025-08-01 16:45:01+00:00| seen| Telegram/xc3vkOd00NlphTo8oCaHSNQmEDCJCvPNfenHNFoNBmcoi4...

4.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2025/06/17 12:00 a.m.98 views

📄 Freefloat FTP Server 1.0 Remote Buffer Overflow

Freefloat FTP Server version 1.0 suffers from a buffer overflow vulnerability. Exploit Title: Freefloat FTP Server 1.0 - Remote Buffer Overflow Date: 22 may 2025 Notification vendor: No reported Discovery by: Fernando Mengali LinkedIn: https://www.linkedin.com/in/fernando-mengali-273504142/...

9.8CVSS7.9AI score0.14985EPSS
SaveExploits13
Exploit DB
Exploit DB
added 2025/06/13 12:00 a.m.292 views

Freefloat FTP Server 1.0 - Remote Buffer Overflow

Exploit Title: Freefloat FTP Server 1.0 - Remote Buffer Overflow Date: 22 may 2025 Notification vendor: No reported Discovery by: Fernando Mengali LinkedIn: https://www.linkedin.com/in/fernando-mengali-273504142/ Version: 1.0 Tested on: Windows XP SP3 English - Version 5.1 Build...

9.8CVSS7.4AI score0.14985EPSS
SaveExploits13
RedhatCVE
RedhatCVE
added 2025/06/06 1:01 a.m.17 views

CVE-2025-5548

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

9.8CVSS7.2AI score0.14985EPSS
SaveExploits13References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:12 a.m.16 views

CVE-2013-5548

The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...

4.3CVSS7.1AI score0.01134EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/27 6:15 p.m.36 views

CVE-2024-5548

A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint. Attackers can exploit this vulnerability by manipulating the 'projectname' parameter in a GET request to download arbitrary files from the system. This issue...

7.5CVSS0.01021EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/06/27 5:33 p.m.16 views

CVE-2024-5548 Directory Traversal in stitionai/devika

A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint. Attackers can exploit this vulnerability by manipulating the 'projectname' parameter in a GET request to download arbitrary files from the system. This issue...

7.5CVSS7.5AI score0.01021EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/06/27 5:33 p.m.40 views

CVE-2024-5548 Directory Traversal in stitionai/devika

A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint. Attackers can exploit this vulnerability by manipulating the 'projectname' parameter in a GET request to download arbitrary files from the system. This issue...

7.5CVSS0.01021EPSS
SaveExploits1References2
CVE
CVE
added 2024/06/27 5:33 p.m.51 views

CVE-2024-5548

Summary (CVE-2024-5548): A directory traversal vulnerability exists in the stitionai/devika repository, affecting the /api/download-project endpoint. The flaw stems from insufficient input validation in the download_project function, when handling the project_name parameter, enabling an attacker ...

7.5CVSS7.5AI score0.01021EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2024/06/27 5:33 p.m.13 views

CVE-2024-5548 Directory Traversal in stitionai/devika

A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint. Attackers can exploit this vulnerability by manipulating the 'projectname' parameter in a GET request to download arbitrary files from the system. This issue...

7.5CVSS7AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/11/09 8:15 p.m.6 views

CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/09 7:36 p.m.22 views

CVE-2023-5548 Moodle: cache poisoning risk with endpoint revision numbers

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

3.3CVSS6.2AI score
SaveExploits0References6
CVE
CVE
added 2023/11/09 7:36 p.m.127 views

CVE-2023-5548

CVE-2023-5548 describes a Moodle-related issue where stronger revision number limitations on file serving endpoints are required to improve cache poisoning protection. The linked OSV/GHSA entries reiterate this root cause, framing it as a risk tied to how file endpoints handle revision data. The ...

5.3CVSS4.8AI score0.00294EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2023/10/20 12:00 a.m.31 views

Fedora: Security Advisory for moodle (FEDORA-2023-6880309d0e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.0193EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/19 12:00 a.m.70 views

Fedora 37 : moodle (2023-a7b0d27d18)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a7b0d27d18 advisory. Latest updates Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

9.8CVSS6.1AI score0.0193EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2023/10/10 12:00 a.m.33 views

RHEL 8 : kpatch-patch (RHSA-2023:5548)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5548 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

7.8CVSS7.2AI score0.01508EPSS
SaveExploits3References9
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/18 1:45 a.m.61 views

Security Bulletin: Vulnerabilities in IBM SDK Java Technology Edition affects the IBM FlashSystem models 840 and 900

Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition to which the IBM® FlashSystem™ 840 and FlashSystem™ 900 are susceptible. An exploit of these vulnerabilities CVE-2016-5546, CVE-2016-5547, CVE-2016-5548, CVE-2016-5549, CVE-2016-2183 could make the system susceptible to...

7.5CVSS7.9AI score0.95707EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/10 12:06 p.m.58 views

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Planning Analytics Express and IBM Cognos Express.

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition Version 7 that is used by IBM Planning Analytics Express and IBM Cognos Express. These issues were disclosed as part of the IBM Java SDK updates in Oct 2016 and Jan 2017. OpenSSL vulnerabilities were disclosed ...

7.5CVSS8.5AI score0.95707EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/19 9:04 p.m.39 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9 and IBM BigFix Inventory v9

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM License Metric Tool and IBM BigFix Inventory. These issues were disclosed as part of the IBM Java SDK updates in Jan 2017 Vulnerability Details CVEID: CVE-2016-2183 DESCRIPTION: OpenSSL could...

7.5CVSS7.6AI score0.95707EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/01 1:05 p.m.49 views

Security Bulletin: Vulnerability in IBM Java SDK affects IMS™ Enterprise Suite: Explorer for Development (CVE-2016-2183, CVE-2016-5547, CVE-2016-5548, CVE-2016-5549).

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version 8.0.3.22 and earlier that is used by IMS™ Enterprise Suite: Explorer for Development. This issue was disclosed as part of the IBM Java SDK updates in January 2017. Vulnerability Details CVEID: CVE-2016-5548 DESCRIPTION: ...

7.5CVSS1.7AI score0.95707EPSS
SaveExploits7Affected Software1
Rows per page
Query Builder