Lucene search
K

86 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-6335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.3 that under certain conditions could have allowed an authenticate...

5.4CVSS6.2AI score0.00192EPSS
Exploits0References2
OSV
OSV
added 2026/05/20 3:15 a.m.3 views

CGA-6335-8PGX-MH53

Bulletin has no description...

8.3CVSS5.7AI score0.00207EPSS
Exploits0
Circl
Circl
added 2026/05/14 6:0 p.m.8 views

CVE-2026-6335

creationtimestamp| type| source ---|---|--- 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260515...

5.4CVSS5.7AI score0.00192EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.11 views

GitLab 18.11 < 18.11.3 (CVE-2026-6335)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitLab CVE-2026-6335 Note that Nessus has not tested for this issue but has instead relied only on the application...

5.4CVSS5.8AI score0.00192EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-6335

Malware in sbrugna...

9.8CVSS9.5AI score0.09076EPSS
Exploits3References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-6335

Malware in sbrugna...

9.3CVSS5.7AI score0.04536EPSS
Exploits0References20
Circl
Circl
added 2025/06/20 11:46 a.m.6 views

CVE-2025-6335

creationtimestamp| type| source ---|---|--- 2025-06-20 11:46:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18935...

7.2CVSS4.8AI score0.06864EPSS
Exploits1References1
OSV
OSV
added 2025/06/20 11:15 a.m.4 views

CVE-2025-6335

A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /include/dedetag.class.php of the component Template Handler. The manipulation of the argument notes leads to command injection. The attack may be initiated remotely...

7.2CVSS5.6AI score0.06864EPSS
Exploits1References4
Circl
Circl
added 2025/06/17 9:41 a.m.4 views

RHSA-2024:6335

creationtimestamp| type| source ---|---|--- 2025-06-17 09:41:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18576...

4.8AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:57 a.m.8 views

CVE-2023-6335

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7...

7.8CVSS7AI score0.0017EPSS
Exploits0
Circl
Circl
added 2025/05/15 8:37 p.m.24 views

CVE-2024-6335

creationtimestamp| type| source ---|---|--- 2025-05-15 20:37:15+00:00| seen| https://bsky.app/profile/potato.software/post/3lpaekssgag2f...

4.8CVSS7AI score0.0032EPSS
Exploits1References1
CVE
CVE
added 2025/05/15 8:7 p.m.37 views

CVE-2024-6335

CVE-2024-6335 affects the WordPress plugin Tracking Code Manager (versions before 2.3.0). The root cause is inadequate sanitization and escaping of certain settings, enabling stored cross-site scripting by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, such as in mul...

4.8CVSS5.6AI score0.0032EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/15 8:7 p.m.7 views

CVE-2024-6335 Tracking Code Manager < 2.3.0- Admin+ Stored Cross-Site Scripting

The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.1AI score0.0032EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/05/15 8:7 p.m.11 views

CVE-2024-6335 Tracking Code Manager < 2.3.0- Admin+ Stored Cross-Site Scripting

The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

0.0032EPSS
Exploits1References1
Circl
Circl
added 2025/05/06 7:21 p.m.4 views

CVE-2018-6335

creationtimestamp| type| source ---|---|--- 2025-05-06 19:21:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15196...

7.5CVSS7.3AI score0.01469EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2017-6335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read a...

5.5CVSS6.8AI score0.01932EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/09/04 12:0 a.m.47 views

RHEL 8 : Satellite 6.15.3.1 Security Update (Important) (RHSA-2024:6335)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6335 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

9.8CVSS8.3AI score0.00814EPSS
Exploits0References7
Circl
Circl
added 2024/02/06 6:12 p.m.5 views

CVE-2023-6335

creationtimestamp| type| source ---|---|--- 2024-02-06 18:12:07+00:00| seen| https://t.me/ctinow/180183...

7.8CVSS7.5AI score0.0017EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/01/16 7:42 p.m.5 views

CVE-2023-6335

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7...

6.4CVSS7.7AI score0.0017EPSS
Exploits0References1
CVE
CVE
added 2024/01/16 7:42 p.m.38 views

CVE-2023-6335

The CVE-2023-6335 issue is an Improper Link Resolution Before File Access ("Link Following") vulnerability in HYPR Workforce Access on Windows, affecting versions before 8.7. The root cause is a misresolution of file access links that allows a user-controlled filename, potentially enabling unauth...

7.8CVSS7.6AI score0.0017EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder