Lucene search
K

42 matches found

Circl
Circl
added 2026/04/22 2:24 p.m.6 views

CVE-2026-5749

creationtimestamp| type| source ---|---|--- 2026-04-22 14:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3p6fiyof2r 2026-04-22 15:17:58+00:00| published-proof-of-concept| Telegram/T-tSUe4gAAJ730TQ0PlGw8q14q5lnUsjAniTyA8QTkzNFGU...

8.7CVSS5.8AI score0.0027EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/22 1:23 p.m.3 views

CVE-2026-5749

Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated API resources. Successful exploitation of this vulnerability could allow an unauthenticated attacker to compromise th...

8.7CVSS5.8AI score0.0027EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/08 4:1 p.m.11 views

CVE-2025-5749

WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger devices. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.00171EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 4:15 p.m.14 views

CVE-2025-5749

WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger devices. Authentication is not required to exploit this...

8.8CVSS0.00171EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 3:30 p.m.60 views

CVE-2025-5749

The CVE-2025-5749 issue affects WOLFBOX Level 2 EV Charger devices, specifically the BLE communication path. The root cause is an uninitialized variable in the handling of cryptographic keys used in vendor-specific encrypted communications, enabling authentication bypass for network-adjacent atta...

8.8CVSS6.8AI score0.00171EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 4:43 p.m.7 views

CVE-2020-5749

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

5.4CVSS5.6AI score0.00666EPSS
Exploits1References1
OSV
OSV
added 2025/01/17 12:7 a.m.10 views

CGA-5749-245M-24VG

Bulletin has no description...

9.8CVSS8.8AI score0.42316EPSS
Exploits13
Circl
Circl
added 2024/10/15 9:7 p.m.3 views

CVE-2024-5749

creationtimestamp| type| source ---|---|--- 2024-10-15 21:07:30+00:00| seen| https://t.me/cvedetector/7939 2026-02-24 16:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfml3hvdcr24...

7.5CVSS4.8AI score0.01213EPSS
Exploits0References2
OSV
OSV
added 2024/10/15 6:15 p.m.6 views

CVE-2024-5749

Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials...

7.5CVSS5.8AI score0.01213EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/08/15 12:0 a.m.12 views

Debian: Security Advisory (DSA-5749-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.3AI score0.01283EPSS
Exploits1References2
Circl
Circl
added 2024/01/01 2:31 p.m.3 views

CVE-2023-5749

creationtimestamp| type| source ---|---|--- 2024-01-01 14:31:27+00:00| seen| https://t.me/ctinow/161314...

6.1CVSS6.1AI score0.0062EPSS
Exploits2References1
CVE
CVE
added 2023/12/11 7:22 p.m.45 views

CVE-2023-5749

The CVE concerns the EmbedPress WordPress plugin before version 3.9.2, which does not sanitise or escape user input before rendering it on a page, causing a Reflected XSS. The issue could be exploited against high-privilege users such as admins. Affected software: EmbedPress WordPress plugin (ver...

6.1CVSS6AI score0.0062EPSS
Exploits2References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/24 12:0 a.m.32 views

Rocky Linux 9 : .NET 7.0 (RLSA-2023:5749)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:5749 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wil...

7.5CVSS7.2AI score0.99999EPSS
Exploits19References3
Tenable Nessus
Tenable Nessus
added 2023/10/18 12:0 a.m.44 views

Oracle Linux 9 : .NET / 7.0 (ELSA-2023-5749)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5749 advisory. 7.0.112-1.0.1 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 Tenable has extracted the preceding description block directly from the...

7.5CVSS7.3AI score0.99999EPSS
Exploits19References2
Tenable Nessus
Tenable Nessus
added 2023/10/16 12:0 a.m.47 views

RHEL 9 : .NET 7.0 (RHSA-2023:5749)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5749 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

7.5CVSS7.3AI score0.99999EPSS
Exploits19References5
Tenable Nessus
Tenable Nessus
added 2022/11/29 12:0 a.m.21 views

Ubuntu 16.04 ESM : libsamplerate vulnerability (USN-5749-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5749-1 advisory. Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds checking. If a user were tricked into processing a speciall...

5.5CVSS5.7AI score0.00913EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/06/11 8:59 p.m.10 views

CVE-2017-5749

...

Exploits0
CVE
CVE
added 2021/06/11 8:59 p.m.24 views

CVE-2017-5749

CVE-2017-5749 entry is rejected/not used per Initial Description.

7.3AI score
Exploits0
OSV
OSV
added 2020/05/07 5:15 p.m.11 views

CVE-2020-5749

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

5.4CVSS5.6AI score
Exploits0References1
CVE
CVE
added 2020/05/07 4:15 p.m.39 views

CVE-2020-5749

TCExam 14.2.2 is affected by insufficient output sanitization, enabling remote, authenticated attackers to perform persistent cross-site scripting by creating specially crafted groups. The issue is documented across multiple sources (NVD/Red Hat etc.) with impact described as persistent XSS; no s...

5.4CVSS5AI score0.00666EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder