Lucene search
K

73 matches found

OSV
OSV
added 18 hours ago3 views

ROOT-OS-DEBIAN-12-CVE-2023-6039 CVE-2023-6039 in rootio-linux - Patched by Root

Root has patched CVE-2023-6039 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

5.5CVSS7.3AI score0.00019EPSS
Exploits0
OSV
OSV
added 2025/09/15 1:10 a.m.1 views

ECHO-FD8A-6039-C2C3

Bulletin has no description...

8.1CVSS9.4AI score0.00222EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-6039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a...

6.1CVSS7.3AI score0.00909EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2025/07/20 4:44 p.m.3 views

@toptal/picasso (>=49.0.0 <=54.1.4-alpha-CPS-2606-migrate-to-tailwind-4-fe1684b09.0), @toptal/picasso-page (>=5.0.0 <=5.4.18-alpha-CPS-2606-migrate-to-tailwind-4-fe1684b09.0) potentially affected by unknown CVE via @toptal/picasso-accordion (>=3.0.0 <=3.0.9)

@toptal/picasso-accordion NPM version =3.0.0, =49.0.0, =5.0.0, =5.4.18-alpha-CPS-2606-migrate-to-tailwind-4-fe1684b09.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-6039...

5.8AI score
Exploits0
Circl
Circl
added 2025/07/07 3:14 p.m.1 views

CVE-2025-6039

creationtimestamp| type| source ---|---|--- 2025-07-07 15:14:18+00:00| seen| Telegram/PW3Jv0LvM8ZoRLikixTRughEUhK3M9n4d76XOr9xi3hug...

6.4CVSS4.8AI score0.00164EPSS
Exploits0
NVD
NVD
added 2025/07/04 3:15 a.m.2 views

CVE-2025-6039

The ProcessingJS for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pjs4wp' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00164EPSS
Exploits0References2
CVE
CVE
added 2025/07/04 1:44 a.m.22 views

CVE-2025-6039

CVE-2025-6039 affects the ProcessingJS for WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) via the plugin’s pjs4wp shortcode in all versions up to and including 1.2.2. With authenticated access at contributor level or higher , an attacker can inject scripts that execute...

6.4CVSS5.5AI score0.00164EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/04 1:44 a.m.2 views

CVE-2025-6039 ProcessingJS for WordPress <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The ProcessingJS for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pjs4wp' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.4AI score0.00164EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/07/03 11:17 p.m.4 views

WordPress ProcessingJS for WordPress plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin ProcessingJS for WordPress versions = 1.2.2...

6.4CVSS5.5AI score0.00164EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 9:17 a.m.2 views

CVE-2024-6039

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

8.8CVSS7.8AI score0.00158EPSS
Exploits1References1
Circl
Circl
added 2025/04/11 9:2 p.m.4 views

CVE-2024-6039

creationtimestamp| type| source ---|---|--- 2025-04-11 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4c3ryk27...

8.8CVSS7AI score0.00158EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-6039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in lan78xxdisconnect in drivers/net/usb/lan78xx.c in the network sub- component, net/usb/lan78xx in the Linux Kernel. This flaw...

5.5CVSS6.6AI score0.00019EPSS
Exploits0References3
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.166 views

ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure', 'Description' = %q ManageEngine...

7.5CVSS7AI score0.83792EPSS
Exploits10
NVD
NVD
added 2024/06/16 10:15 p.m.15 views

CVE-2024-6039

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

8.8CVSS0.00158EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/06/16 10:0 p.m.19 views

CVE-2024-6039 Feng Office Workspaces sql injection

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

6.5CVSS0.00158EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/06/16 10:0 p.m.18 views

CVE-2024-6039 Feng Office Workspaces sql injection

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

6.5CVSS6.8AI score0.00158EPSS
Exploits1References4
CVE
CVE
added 2024/06/16 10:0 p.m.44 views

CVE-2024-6039

CVE-2024-6039 affects Feng Office 3.11.1.2 in the Workspaces component. The vulnerability stems from improper handling of the dim argument, leading to a SQL injection that can be triggered remotely. Public exploit info is noted in multiple sources. Impact is described as critical in the CVE recor...

8.8CVSS7.1AI score0.00158EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2024/03/21 12:0 a.m.17 views

Ubuntu: Security Advisory (USN-6706-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS9AI score0.00019EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/20 12:0 a.m.28 views

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerability (USN-6706-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6706-1 advisory. It was discovered that the Microchip USB Ethernet driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free...

5.5CVSS6.8AI score0.00019EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.30 views

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:4732-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.00584EPSS
Exploits0References2
Rows per page
Query Builder