Lucene search
K

77 matches found

OSV
OSV
added yesterday3 views

CGA-MF9G-2RQJ-5768

Bulletin has no description...

8.8CVSS5.9AI score0.00103EPSS
Exploits1
Circl
Circl
added 2026/05/28 5:0 a.m.6 views

CVE-2026-5768

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-148-01 2026-05-29 19:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmz7x3hftc22 2026-05-29 20:34:28+00:00| seen|...

8.8CVSS5.8AI score0.00035EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.7 views

MiracleLinux 7 : php-5.4.16-42.el7 (AXSA:2016-1118:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-1118:03 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers...

9.8CVSS8.4AI score0.20989EPSS
Exploits7References5
RedhatCVE
RedhatCVE
added 2025/05/23 9:22 a.m.1 views

CVE-2024-5768

The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mimoupdateprovider' function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level...

6.4CVSS4.9AI score0.00157EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:43 p.m.3 views

CVE-2020-5768

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authenticated attacker to determine the value of database fields...

4.9CVSS7.3AI score0.0105EPSS
Exploits2References1
CVE
CVE
added 2024/06/19 3:12 a.m.42 views

CVE-2024-5768

CVE-2024-5768 affects MIMO Woocommerce Order Tracking (WordPress). The vulnerability is due to a missing capability check in mimo_update_provider, affecting all versions up to and including 1.0.2. Exploitation requires Subscriber+ authenticated access and can enable unauthorized modification of s...

6.4CVSS6.2AI score0.00157EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/19 3:12 a.m.17 views

CVE-2024-5768 MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Authenticated (Contributor+) Stored Cross-Site Scripting

The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mimoupdateprovider' function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level...

6.4CVSS0.00157EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/06/18 12:0 a.m.8 views

WordPress MIMO Woocommerce Order Tracking Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software MIMO Woocommerce Order Tracking Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5768 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 17c034ea51f0 Credits Luci...

6.4CVSS5.7AI score0.00157EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/12/23 9:41 a.m.9 views

CVE-2023-5768

creationtimestamp| type| source ---|---|--- 2023-12-23 09:41:56+00:00| seen| https://t.me/ctinow/158750 2025-05-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-02...

6.1CVSS6.1AI score0.0007EPSS
Exploits0References2
CVE
CVE
added 2023/12/04 2:33 p.m.36 views

CVE-2023-5768

The CVE-2023-5768 issue concerns Hitachi Energy RTU500 series using HCI IEC 60870-5-104. The vulnerability arises from incomplete or incorrect APDU frame layout, which can block the link layer; an endless blocking condition can occur while reading incoming frames when APDU length information is w...

6.1CVSS6.1AI score0.0007EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/17 12:0 a.m.45 views

RHEL 8 : nghttp2 (RHSA-2023:5768)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:5768 advisory. nghttp2 contains the Hypertext Transfer Protocol version 2 HTTP/2 client, server, and proxy programs as well as a library implementing the HTTP/2...

7.5CVSS7.3AI score0.944EPSS
Exploits19References5
F5 Networks
F5 Networks
added 2023/02/21 8:0 p.m.51 views

K95432245: PHP vulnerability CVE-2016-5768

Security Advisory Description Double free vulnerability in the phpmbregexeregreplaceexec function in phpmbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service application...

9.8CVSS9.2AI score0.20989EPSS
Exploits1Affected Software21
SUSE CVE
SUSE CVE
added 2023/02/15 4:17 a.m.2 views

SUSE CVE-2019-5768

DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

6.5CVSS6.7AI score0.0046EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.37 views

Mageia: Security Advisory (MGASA-2016-0238)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.2AI score0.20989EPSS
Exploits9References4
Cvelist
Cvelist
added 2021/06/11 9:1 p.m.9 views

CVE-2017-5768

...

Exploits0
CVE
CVE
added 2021/06/11 9:1 p.m.37 views

CVE-2017-5768

CVE-2017-5768 entry is rejected/not used and does not represent an active vulnerability.

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/08/27 12:0 a.m.27 views

WordPress Plugin 'Email Subscribers & Newsletters' Multiple Vulnerabilities

The WordPress application running on the remote host has a version of the 'Email Subscribers & Newsletters' plugin that is affected by multiple vulnerabilities. - A cross-site request forgery CSRF vulnerability exists in the sendtestemail component. An unauthenticated, remote attacker can exploit...

6.5CVSS5.9AI score0.0105EPSS
Exploits4References4
NVD
NVD
added 2020/07/17 10:15 p.m.8 views

CVE-2020-5768

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authenticated attacker to determine the value of database fields...

4.9CVSS0.0105EPSS
Exploits2References1
Cvelist
Cvelist
added 2020/07/17 9:22 p.m.13 views

CVE-2020-5768

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authenticated attacker to determine the value of database fields...

5.7AI score0.0105EPSS
Exploits2References1
CVE
CVE
added 2020/07/17 9:22 p.m.42 views

CVE-2020-5768

CVE-2020-5768 targets the WordPress plugin Icegram Email Subscribers & Newsletters (v4.4.8) . The flaw is an authenticated SQL injection in the es_newsletters_settings_callback component, caused by improper sanitization, enabling a remote, logged-in attacker to infer database field values. This a...

4.9CVSS5.5AI score0.0105EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder