Lucene search
K

42 matches found

Circl
Circl
added 2026/04/22 2:24 p.m.2 views

CVE-2026-5749

creationtimestamp| type| source ---|---|--- 2026-04-22 14:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3p6fiyof2r 2026-04-22 15:17:58+00:00| published-proof-of-concept| Telegram/T-tSUe4gAAJ730TQ0PlGw8q14q5lnUsjAniTyA8QTkzNFGU...

8.7CVSS5.8AI score0.00095EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/22 1:23 p.m.2 views

CVE-2026-5749

Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated API resources. Successful exploitation of this vulnerability could allow an unauthenticated attacker to compromise th...

8.7CVSS5.8AI score0.00095EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/08 4:1 p.m.8 views

CVE-2025-5749

WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger devices. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.00041EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 4:15 p.m.12 views

CVE-2025-5749

WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger devices. Authentication is not required to exploit this...

8.8CVSS0.00041EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 3:30 p.m.50 views

CVE-2025-5749

The CVE-2025-5749 issue affects WOLFBOX Level 2 EV Charger devices, specifically the BLE communication path. The root cause is an uninitialized variable in the handling of cryptographic keys used in vendor-specific encrypted communications, enabling authentication bypass for network-adjacent atta...

8.8CVSS6.8AI score0.00041EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 4:43 p.m.5 views

CVE-2020-5749

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

5.4CVSS5.6AI score0.00157EPSS
Exploits1References1
OSV
OSV
added 2025/01/17 12:7 a.m.10 views

CGA-5749-245M-24VG

Bulletin has no description...

9.8CVSS8.8AI score0.84776EPSS
Exploits12
Circl
Circl
added 2024/10/15 9:7 p.m.2 views

CVE-2024-5749

creationtimestamp| type| source ---|---|--- 2024-10-15 21:07:30+00:00| seen| https://t.me/cvedetector/7939 2026-02-24 16:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfml3hvdcr24...

7.5CVSS4.8AI score0.00364EPSS
Exploits0References2
OSV
OSV
added 2024/10/15 6:15 p.m.0 views

CVE-2024-5749

Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials...

7.5CVSS5.8AI score
Exploits0References1
OpenVAS
OpenVAS
added 2024/08/15 12:0 a.m.12 views

Debian: Security Advisory (DSA-5749-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.3AI score0.06541EPSS
Exploits1References2
Circl
Circl
added 2024/01/01 2:31 p.m.1 views

CVE-2023-5749

creationtimestamp| type| source ---|---|--- 2024-01-01 14:31:27+00:00| seen| https://t.me/ctinow/161314...

6.1CVSS6.1AI score0.0146EPSS
Exploits2References1
CVE
CVE
added 2023/12/11 7:22 p.m.38 views

CVE-2023-5749

The CVE concerns the EmbedPress WordPress plugin before version 3.9.2, which does not sanitise or escape user input before rendering it on a page, causing a Reflected XSS. The issue could be exploited against high-privilege users such as admins. Affected software: EmbedPress WordPress plugin (ver...

6.1CVSS6AI score0.0146EPSS
Exploits2References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/24 12:0 a.m.29 views

Rocky Linux 9 : .NET 7.0 (RLSA-2023:5749)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:5749 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wil...

7.5CVSS7.2AI score0.944EPSS
Exploits19References3
Tenable Nessus
Tenable Nessus
added 2023/10/18 12:0 a.m.43 views

Oracle Linux 9 : .NET / 7.0 (ELSA-2023-5749)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5749 advisory. 7.0.112-1.0.1 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 Tenable has extracted the preceding description block directly from the...

7.5CVSS7.3AI score0.944EPSS
Exploits19References2
Tenable Nessus
Tenable Nessus
added 2023/10/16 12:0 a.m.45 views

RHEL 9 : .NET 7.0 (RHSA-2023:5749)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5749 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

7.5CVSS7.3AI score0.944EPSS
Exploits19References5
Tenable Nessus
Tenable Nessus
added 2022/11/29 12:0 a.m.20 views

Ubuntu 16.04 ESM : libsamplerate vulnerability (USN-5749-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5749-1 advisory. Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds checking. If a user were tricked into processing a speciall...

5.5CVSS5.7AI score0.00223EPSS
Exploits0References2
CVE
CVE
added 2021/06/11 8:59 p.m.23 views

CVE-2017-5749

CVE-2017-5749 entry is rejected/not used per Initial Description.

7.3AI score
Exploits0
Cvelist
Cvelist
added 2021/06/11 8:59 p.m.8 views

CVE-2017-5749

...

Exploits0
OSV
OSV
added 2020/05/07 5:15 p.m.10 views

CVE-2020-5749

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

5.4CVSS5.6AI score
Exploits0References1
CVE
CVE
added 2020/05/07 4:15 p.m.35 views

CVE-2020-5749

TCExam 14.2.2 is affected by insufficient output sanitization, enabling remote, authenticated attackers to perform persistent cross-site scripting by creating specially crafted groups. The issue is documented across multiple sources (NVD/Red Hat etc.) with impact described as persistent XSS; no s...

5.4CVSS5AI score0.00157EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder