Lucene search
K

44 matches found

Wolfi
Wolfi
added 2026/01/07 1:51 a.m.3 views

CVE-2012-5639 vulnerabilities

Vulnerabilities for packages: libreoffice...

6.5CVSS7AI score0.00447EPSS
Exploits0
Chainguard
Chainguard
added 2026/01/07 1:30 a.m.4 views

CVE-2012-5639 vulnerabilities

Vulnerabilities for packages: libreoffice...

6.5CVSS7AI score0.00447EPSS
Exploits0
NVD
NVD
added 2025/06/05 6:15 a.m.11 views

CVE-2025-5639

A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has be...

9.8CVSS0.00277EPSS
Exploits1References5
Circl
Circl
added 2025/06/05 6:1 a.m.13 views

CVE-2025-5639

creationtimestamp| type| source ---|---|--- 2025-06-05 06:01:27+00:00| published-proof-of-concept| Telegram/uHWvAuvUwozE9xqR-TnjEBub-qWhHMqFHErXUgC3HaO00ME 2025-06-05 06:53:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqtqdlqvx4h2...

9.8CVSS7.3AI score0.00277EPSS
Exploits1References2
CVE
CVE
added 2025/06/05 5:31 a.m.52 views

CVE-2025-5639

The CVE-2025-5639 entry concerns PHPGurukul Notice Board System v1.0 with a SQL injection in /forgot-password.php via the email parameter. Affected component is the forgot-password flow; the issue allows remote exploitation and could lead to unauthorized database access or data disclosure, as des...

9.8CVSS7.5AI score0.00277EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/05 5:31 a.m.6 views

CVE-2025-5639 PHPGurukul Notice Board System forgot-password.php sql injection

A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has be...

7.5CVSS7.5AI score0.00277EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 3:37 p.m.5 views

CVE-2020-5639

Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed...

10CVSS7.3AI score0.09206EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2012-5639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice and OpenOffice automatically open embedded content CVE-2012-5639 Note that Nessus relies on the presence of the package as reported by the vendor...

6.5CVSS6.4AI score0.00447EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/06/21 6:58 a.m.17 views

CVE-2024-5639 User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update

The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.1 via the 'restapichangeprofileimage' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

4.3CVSS0.00209EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/06/21 6:58 a.m.10 views

CVE-2024-5639 User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update

The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.1 via the 'restapichangeprofileimage' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

4.3CVSS4.4AI score0.00209EPSS
Exploits0References4
CVE
CVE
added 2024/06/21 6:58 a.m.40 views

CVE-2024-5639

CVE-2024-5639 : The WordPress User Profile Picture plugin (metronet-profile-picture) suffers an Insecure Direct Object Reference in all versions up to and including 2.6.1 due to missing validation in rest_api_change_profile_image. This allows authenticated attackers with Author-level access or hi...

4.3CVSS4.8AI score0.00209EPSS
Exploits0References4Affected Software1
Patchstack
Patchstack
added 2024/06/20 12:0 a.m.7 views

WordPress User Profile Picture Plugin <= 2.6.1 is vulnerable to Broken Access Control

Software User Profile Picture Type Plugin Vulnerable versions = 2.6.1 Fixed in 2.6.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-5639 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f06c42237928 Credits JoanClarke2 Required...

4.3CVSS6.6AI score0.00209EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/14 12:0 a.m.20 views

Debian: Security Advisory (DSA-5639-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.00147EPSS
Exploits1References2
CVE
CVE
added 2023/10/19 1:53 a.m.58 views

CVE-2023-5639

CVE-2023-5639 affects the WordPress plugin Team Showcase. The vulnerability is a Stored XSS via the plugin shortcode tmfshortcode in all versions up to 2.1 due to insufficient input sanitization and output escaping on user attributes. Exploitation requires an authenticated attacker with contribut...

6.4CVSS5.2AI score0.00092EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2022/09/27 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-5639-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7AI score0.05077EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2022/09/26 12:0 a.m.31 views

Ubuntu 20.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5639-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5639-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

8.2CVSS7.3AI score0.05077EPSS
Exploits3References7
0day.today
0day.today
added 2021/03/19 12:0 a.m.85 views

KZTech / JatonTec / Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution Vulnerability

Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution Exploit Author: LiquidWorm Vendor Homepage: http://www.kzbtech.com http://www.jatontec.com https://www.neotel.mk Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page:...

0.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/12/21 12:0 a.m.40 views

RHEL 7 : openssl (RHSA-2020:5639)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5639 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

5.9CVSS7.1AI score0.00348EPSS
Exploits3References4
CVE
CVE
added 2020/12/14 2:25 a.m.56 views

CVE-2020-5639

FileZen vulnerable to a directory traversal (CWE-22) in versions V3.0.0–V4.2.2, enabling a remote attacker to upload an arbitrary file to a specific directory and potentially execute arbitrary OS commands. Root cause is a directory traversal flaw in the affected FileZen appliances. Remediation pr...

10CVSS9.4AI score0.09206EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2019/12/20 4:43 p.m.2 views

CVE-2012-5639

creationtimestamp| type| source ---|---|--- 2019-12-20 16:43:20+00:00| seen| https://t.me/cibsecurity/8798 2024-01-09 15:00:07+00:00| seen| https://t.me/truesecator/5270...

6.5CVSS6.3AI score0.00447EPSS
Exploits0References2
Rows per page
Query Builder