Lucene search
K

62 matches found

OSV
OSV
added 2026/06/22 11:38 a.m.3 views

MINI-5989-6MFX-MJR6

Bulletin has no description...

5.9CVSS6.7AI score0.00551EPSS
Exploits0
OSV
OSV
added 2026/06/04 12:17 p.m.7 views

MINI-6WVP-5989-XMF5

Bulletin has no description...

5.3CVSS5.7AI score0.00313EPSS
Exploits0
OSV
OSV
added 2026/04/11 4:17 p.m.4 views

MINI-JHCC-5989-6GX8

Bulletin has no description...

6.1CVSS5.7AI score0.0029EPSS
Exploits0
Circl
Circl
added 2026/04/10 1:6 a.m.3 views

CVE-2026-5989

creationtimestamp| type| source ---|---|--- 2026-04-10 01:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj44ymxfzy2i 2026-04-10 01:19:02+00:00| seen| Telegram/r2aLRB54IhOSR-P7tVQ1PquPIQ5c0jGeGUejuuUUcNPCN8 2026-04-30 23:37:14+00:00| seen|...

9CVSS8.1AI score0.00511EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-5989

Malware in sbrugna...

10CVSS9.4AI score0.07016EPSS
Exploits1References2
NVD
NVD
added 2024/06/25 4:15 p.m.22 views

CVE-2024-5989

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™...

9.8CVSS0.02393EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/25 4:1 p.m.20 views

CVE-2024-5989 Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™...

9.3CVSS8.8AI score0.02393EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/25 12:0 a.m.25 views

Rockwell Automation ThinManager ThinServer SD1677 Multiple Vulnerabilites

The version of Rockwell Automation ThinManager ThinServer installed on the remote host is 11.1.x prior to 11.1.8, 11.2.x prior to 11.2.9, 12.0.x prior to 12.0.7, 12.1.x prior to 12.1.8, 13.0.x prior to 13.0.5, 13.1.x prior to 13.1.3 or 13.2.x prior to 13.2.2. It is therefore, affected by mutliple...

9.8CVSS6.7AI score0.02654EPSS
Exploits0References4
Circl
Circl
added 2024/03/19 6:41 p.m.6 views

CVE-2019-5989

creationtimestamp| type| source ---|---|--- 2024-03-19 18:41:18+00:00| seen| https://t.me/ctinow/211827...

6.1CVSS6.2AI score0.00797EPSS
Exploits1References1
Circl
Circl
added 2023/12/21 11:22 a.m.7 views

CVE-2023-5989

creationtimestamp| type| source ---|---|--- 2023-12-21 11:22:26+00:00| seen| https://t.me/ctinow/157617 2024-01-14 10:41:07+00:00| seen| https://t.me/ctinow/167990 2025-04-24 15:06:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13251...

6.1CVSS6.1AI score0.00331EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/12/21 10:15 a.m.7 views

CVE-2023-5989

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

6.1CVSS5.9AI score0.00331EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/12/21 9:45 a.m.33 views

CVE-2023-5989 Stored XSS in Uyumsoft ERP

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

6.1CVSS6.4AI score0.00331EPSS
Exploits0References2
CVE
CVE
added 2023/12/21 9:45 a.m.44 views

CVE-2023-5989

CVE-2023-5989 describes a Stored XSS in Uyumsoft Information System and Technologies’ LioXERP (versions prior to v.146). The root cause is improper neutralization of input during web page generation , allowing an authenticated user to inject scripts that are stored and later executed. Affected pr...

6.1CVSS6.5AI score0.00331EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/24 12:0 a.m.73 views

Oracle Linux 8 : varnish (ELSA-2023-5989)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5989 advisory. varnish 6.0.8-3.1 - Add parameters h2rstallowance and h2rstallowanceperiod to mitigate CVE-2023-44487 varnish-modules Tenable has extracted the preceding...

7.5CVSS7.3AI score0.99999EPSS
Exploits19References2
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.36 views

RHEL 8 : varnish (RHSA-2023:5989)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5989 advisory. Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and ov...

7.5CVSS7.4AI score0.99999EPSS
Exploits19References5
Tenable Nessus
Tenable Nessus
added 2023/03/30 12:0 a.m.23 views

Ubuntu 16.04 ESM : GlusterFS vulnerability (USN-5989-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5989-1 advisory. Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS7.3AI score0.00914EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.6 views

The vulnerability of the SFCB service (Small Footprint CIM Broker), which is part of the VMware ESXi hypervisor and the VMware Cloud Foundation virtualization platform, allows a perpetrator to bypass the authentication process.

The vulnerability of the SFCB Small Footprint CIM Broker service of the VMware ESXi hypervisor and the VMware Cloud Foundation virtualization platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication...

9.8CVSS7.7AI score0.01158EPSS
Exploits0References5Affected Software1
NCSC
NCSC
added 2021/07/14 12:0 a.m.52 views

Vulnerabilities fixed in VMware ESXi

VMware has fixed two vulnerabilities in ESXi. The vulnerability with reference CVE-2021-21994 is located in the Small Footprint CIM Broker SFCB and allows a remote malicious person to bypass authentication. This requires rogue network traffic be sent to port 5989 of the ESXi server. The...

9.8CVSS7AI score0.01158EPSS
Exploits0
OSV
OSV
added 2021/07/13 7:15 p.m.5 views

CVE-2021-21994

SFCB Small Footprint CIM Broker as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request...

9.8CVSS5.8AI score0.01158EPSS
Exploits0References1
NVD
NVD
added 2021/07/13 7:15 p.m.16 views

CVE-2021-21994

SFCB Small Footprint CIM Broker as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request...

9.8CVSS0.01158EPSS
Exploits0References1
Rows per page
Query Builder