Lucene search
K

56 matches found

OSV
OSV
added 2026/06/04 6:43 p.m.4 views

MINI-5577-X6JW-J2HG

Bulletin has no description...

7.5CVSS5.7AI score0.0056EPSS
Exploits0
Circl
Circl
added 2026/04/05 5:15 p.m.1 views

CVE-2026-5577

creationtimestamp| type| source ---|---|--- 2026-04-05 17:15:47+00:00| published-proof-of-concept| Telegram/gzCKNObz4im4uV-yc9tEdz-C82sp4ablGsaOO-Gqtulpb0 2026-04-05 18:33:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mirf7byob52k 2026-04-05 20:05:50+00:00| seen|...

8.6CVSS7.3AI score0.00376EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/06/06 8:7 a.m.21 views

CVE-2025-5577

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS7.4AI score0.0052EPSS
Exploits1References1
NVD
NVD
added 2025/06/04 8:15 a.m.8 views

CVE-2025-5577

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS0.0052EPSS
Exploits1References5
Circl
Circl
added 2025/06/04 8:2 a.m.31 views

CVE-2025-5577

creationtimestamp| type| source ---|---|--- 2025-06-04 08:02:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrdp2s53lo2 2025-06-04 08:33:58+00:00| published-proof-of-concept| Telegram/JORd5OezDY3YsiR-DAhtuPFE5h5v2OCRMz2Z1Evvjd5Hz4...

9.8CVSS7.3AI score0.0052EPSS
Exploits1References1
CVE
CVE
added 2025/06/04 7:31 a.m.53 views

CVE-2025-5577

CVE-2025-5577 affects PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability is a SQL injection in the /profile.php file, exploitable via the mobilenumber parameter. The issue is exploitable remotely and has been publicly disclosed. Several connected sources (NVD/CNVD/Red Hat/others)...

9.8CVSS7.5AI score0.0052EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/04 7:31 a.m.4 views

CVE-2025-5577 PHPGurukul Dairy Farm Shop Management System profile.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The explo...

7.5CVSS7.6AI score0.0052EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/06/14 7:31 a.m.22 views

CVE-2024-5577 Where I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion

The Where I Was, Where I Will Be plugin for WordPress is vulnerable to Remote File Inclusion in version = 1.1.1 via the WIWHEADER parameter of the /system/include/includeuser.php file. This makes it possible for unauthenticated attackers to include and execute arbitrary files hosted on external...

9.8CVSS10AI score0.00909EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/06/14 12:0 a.m.12 views

WordPress Where I Was, Where I Will Be Plugin <= 1.1.1 is vulnerable to Remote File Inclusion

Software Where I Was, Where I Will Be Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Remote File Inclusion CVE CVE-2024-5577 Patch priority Low CVSS severity Low 9 Developer Claim ownership PSID d67a5f36ea60 Credits Jonas Höbenreich Required privile...

9.8CVSS6.8AI score0.00909EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/11/07 11:31 a.m.77 views

CVE-2023-5577

CVE-2023-5577 concerns Bitly’s WordPress plugin (wp-bitly). The vulnerability is a Stored Cross-Site Scripting (XSS) in the plugin’s wpbitly shortcode due to insufficient input sanitization and output escaping of user-supplied attributes. It affects all versions up to and including 2.7.1. Exploit...

6.4CVSS5.3AI score0.00521EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2023/11/07 12:0 a.m.12 views

WordPress Bitly Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Bitly Type Plugin Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5577 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b8be7a26a071 Credits Lana Codes Required privilege...

6.4CVSS6AI score0.00521EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-5577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7CVSS7.3AI score0.00305EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/08/24 12:0 a.m.55 views

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5577-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5577-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

6.7CVSS7.3AI score0.00305EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2017:0575-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.24299EPSS
Exploits0References109
NVD
NVD
added 2020/05/14 2:15 a.m.25 views

CVE-2020-5577

Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and earlier Movable Type 6.5, Movable Type Advanced 6.5....

8.8CVSS8.5AI score0.01733EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2020/05/14 2:15 a.m.27 views

CVE-2020-5577

Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and earlier Movable Type 6.5, Movable Type Advanced 6.5....

8.8CVSS7.1AI score0.01733EPSS
Exploits0References3
CVE
CVE
added 2020/05/14 1:0 a.m.112 views

CVE-2020-5577

CVE-2020-5577 affects Movable Type and related products (Movable Type 7.x, MT Advanced, MT for AWS, MT 6.x, MT Premium) and allows remote authenticated attackers to upload arbitrary files and execute a PHP script via unspecified vectors. The issue is categorized as CWE-434 (unrestricted upload of...

8.8CVSS8.3AI score0.01733EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/05/14 1:0 a.m.33 views

CVE-2020-5577

Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and earlier Movable Type 6.5, Movable Type Advanced 6.5....

8.5AI score0.01733EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/05/13 12:0 a.m.57 views

JVN#28806943: Multiple vulnerabilities in Movable Type

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. HTML attribute value injection vulnerability CWE-74 - CVE-2020-5574 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N| Base Score: 4.7 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N...

8.8CVSS7.3AI score0.01733EPSS
Exploits0
Cvelist
Cvelist
added 2019/12/23 8:41 p.m.7 views

CVE-2019-5577

...

Exploits0
Rows per page
Query Builder