Lucene search
K

169 matches found

Circl
Circl
added 2026/05/14 9:47 a.m.4 views

CVE-2026-6512

creationtimestamp| type| source ---|---|--- 2026-05-14 09:47:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlsjx7qqdg2z 2026-05-14 12:02:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116572817091502090...

9.1CVSS5.8AI score0.00093EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/14 8:24 a.m.31 views

CVE-2026-6512 InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Arbitrary Post Deletion via Multiple Parameters

The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete...

9.1CVSS0.00093EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 3 : java-1.6.0-openjdk-1.6.0.33-1.13.5.0.0.1.AXS3 (AXSA:2014-598:04)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-598:04 advisory. Description : The OpenJDK runtime environment. Security issues fixed with this release: CVE-2014-6457 CVE-2014-6502 CVE-2014-6504 CVE-2014-6506...

6.8CVSS6.9AI score0.09411EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2025/06/25 1:51 p.m.5 views

CVE-2025-6512

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...

10CVSS7.1AI score0.00376EPSS
Exploits0References1
Circl
Circl
added 2025/06/23 1:44 p.m.4 views

CVE-2025-6512

creationtimestamp| type| source ---|---|--- 2025-06-23 13:44:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19199 2025-06-23 14:30:48+00:00| seen| Telegram/kY6ODbLBr7-MJN47xDio97AVMRDhVNEbfZ732-se0mfIc 2025-06-23 15:24:13+00:00| seen|...

10CVSS4.8AI score0.00376EPSS
Exploits0References2
CVE
CVE
added 2025/06/23 12:48 p.m.26 views

CVE-2025-6512

CVE-2025-6512 affects BRAIN2 (PT-Security entry PT-2025-26595) with BRAIN2 versions 0.0–3.05 vulnerable to code injected via report scripts by non-admin users. The script in a report can be executed on the BRAIN2 server with administrator rights, enabling potential code injection. Root cause: imp...

10CVSS9.5AI score0.00376EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/23 12:48 p.m.4 views

CVE-2025-6512 Scripts within reports executable on BRAIN2 Server

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...

10CVSS9.5AI score0.00376EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/23 12:48 p.m.8 views

CVE-2025-6512 Scripts within reports executable on BRAIN2 Server

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...

10CVSS0.00376EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:18 a.m.4 views

CVE-2019-6512

An issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to perform requests to the internal workstation SSRF port-scanning, other adjacent workstations SSRF network scanning, or to enumerate files because of the existence of the file:// wrapper...

4.1CVSS6.9AI score0.00324EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2017-6512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the rmtree and removetree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vecto...

5.9CVSS7AI score0.01383EPSS
Exploits0References2
Circl
Circl
added 2024/11/02 3:57 p.m.3 views

CVE-2020-6512

creationtimestamp| type| source ---|---|--- 2024-11-02 15:57:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1429 2024-11-14 06:08:56+00:00| seen| MISP/9924b2c1-7a5f-408d-98ac-90b90fb9b15b...

9.3CVSS8.4AI score0.04245EPSS
Exploits0References1
Circl
Circl
added 2024/09/25 4:50 p.m.0 views

CVE-2024-6512

creationtimestamp| type| source ---|---|--- 2024-09-25 16:50:02+00:00| seen| https://t.me/cvedetector/6317...

6.5CVSS4.8AI score0.00111EPSS
Exploits0References1
NVD
NVD
added 2024/09/25 2:15 p.m.13 views

CVE-2024-6512

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism...

6.5CVSS0.00111EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/25 1:55 p.m.18 views

CVE-2024-6512

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism...

0.00111EPSS
Exploits0References1
CVE
CVE
added 2024/09/25 1:55 p.m.45 views

CVE-2024-6512

CVE-2024-6512: Affects Devolutions Server 2024.2.10 and earlier. The issue is an authorization bypass in the PAM access request approval mechanism that lets authenticated users with approval permissions approve their own requests, bypassing security restrictions. Impact described as an integrity ...

6.5CVSS6.9AI score0.00111EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/25 1:55 p.m.9 views

CVE-2024-6512

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism...

6.8AI score0.00111EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.21 views

RHEL 7 : perl-file-path (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-File-Path: rmtree/removetree race condition CVE-2017-6512 Note that Nessus has not tested for this issue but h...

5.9CVSS6.9AI score0.01383EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/05/14 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2024:1630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.03896EPSS
Exploits1References7
OpenVAS
OpenVAS
added 2023/12/27 12:0 a.m.30 views

Mageia: Security Advisory (MGASA-2023-0355)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.7AI score0.5849EPSS
Exploits3References10
Mageia
Mageia
added 2023/12/26 10:29 a.m.58 views

New chromium-browser-stable 120.0.6099.129 fixes bugs and vulnerabilities

The chromium-browser-stable package has been updated to the 120.0.6099.129 release, fixing bugs and 20 vulnerabilities, together with 120.0.6099.109, 120.0.6099.71 and 120.0.6099.62; some of them are listed below. High CVE-2023-6508: Use after free in Media Stream. Reported by Cassidy...

8.8CVSS8.2AI score0.5849EPSS
Exploits3References6
Rows per page
Query Builder