Lucene search
K

51 matches found

SUSE CVE
SUSE CVE
added 2026/05/01 2:11 a.m.6 views

SUSE CVE-2026-6534

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.0018EPSS
Exploits1References4
AlpineLinux
AlpineLinux
added 2026/04/30 5:36 a.m.8 views

CVE-2026-6534

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.0018EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2026/04/30 12:0 a.m.4 views

CVE-2026-6534

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.0018EPSS
Exploits1References3
OSV
OSV
added 2026/04/11 8:47 p.m.3 views

MINI-6534-2965-W22J

Bulletin has no description...

8.8CVSS5.7AI score0.00532EPSS
Exploits0
NVD
NVD
added 2025/06/24 1:15 a.m.4 views

CVE-2025-6534

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

6.8CVSS0.00384EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/24 12:31 a.m.10 views

CVE-2025-6534 xxyopen/201206030 novel-plus File FileController.java remove resource injection

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

4.2CVSS0.00384EPSS
Exploits1References5
CVE
CVE
added 2025/06/24 12:31 a.m.26 views

CVE-2025-6534

Summary: CVE-2025-6534 affects xxyopen/201206030 novel-plus up to version 5.1.3. The vulnerability resides in the File Handler’s remove function (novel-admin/src/main/java/com/java2nb/common/controller/FileController.java) and stems from improper control of resource identifiers. The issue can be ...

6.8CVSS7AI score0.00384EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/06/16 4:9 p.m.2 views

MINI-66GR-6534-9H5F

Bulletin has no description...

7CVSS7.1AI score0.00911EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 10:26 a.m.5 views

CVE-2024-6534

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

5.4CVSS6.1AI score0.00358EPSS
Exploits1References1
Circl
Circl
added 2024/08/15 5:56 a.m.3 views

CVE-2024-6534

creationtimestamp| type| source ---|---|--- 2024-08-15 05:56:35+00:00| seen| https://t.me/cvedetector/3224 2024-08-15 06:46:45+00:00| seen| https://t.me/cvedetector/3228...

4.3CVSS4.8AI score0.00326EPSS
Exploits0References2
OSV
OSV
added 2024/08/15 4:15 a.m.9 views

CVE-2024-6534

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

4.3CVSS5.2AI score
Exploits0References2
NVD
NVD
added 2024/08/15 4:15 a.m.30 views

CVE-2024-6534

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

4.3CVSS0.00326EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/15 3:10 a.m.15 views

CVE-2024-6534 Directus 10.13.0 - Insecure object reference via PATH presets

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

4.3CVSS6.8AI score0.00326EPSS
Exploits0References2
CVE
CVE
added 2024/08/15 3:10 a.m.74 views

CVE-2024-6534

CVE-2024-6534 affects Directus v10.13.0. An authenticated external attacker can modify presets created by the same user to assign them to another user due to insufficient validation of the user parameter in PATCH /presets (only POST /presets is validated). This vulnerability, when chained with CV...

4.3CVSS4.2AI score0.00326EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/08/15 3:10 a.m.29 views

CVE-2024-6534 Directus 10.13.0 - Insecure object reference via PATH presets

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

4.3CVSS0.00326EPSS
Exploits0References2
CVE
CVE
added 2024/08/15 3:4 a.m.62 views

CVE-2024-6533

Directus 10.13.0 is affected by a DOM-based XSS flaw where an authenticated attacker can inject and store an attacker-controlled value that is rendered into an unsanitized DOM element on the client. The issue stems from how a parameter is stored on the server and later used by the client, enablin...

5.4CVSS4.8AI score0.00358EPSS
Exploits1References2Affected Software1
Circl
Circl
added 2023/12/30 9:6 a.m.3 views

CVE-2023-6534

creationtimestamp| type| source ---|---|--- 2023-12-30 09:06:49+00:00| seen| https://t.me/ctinow/160818 2024-01-12 15:31:38+00:00| seen| https://t.me/ctinow/167320...

7.5CVSS7.3AI score0.00742EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/12/14 12:0 a.m.21 views

Ubuntu: Security Advisory (USN-6534-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.6AI score0.09141EPSS
Exploits4References2
CVE
CVE
added 2023/12/13 8:12 a.m.77 views

CVE-2023-6534

CVE-2023-6534 refers to a FreeBSD pf(4) TCP sequence number validation bug. The flaw allows a remote attacker to inject TCP packets and potentially cause a denial-of-service for hosts behind the firewall. Affected are FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, 13.2-RELEASE before 13.2-RELEASE-p...

7.5CVSS7.6AI score0.00742EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/12/05 12:0 a.m.18 views

FreeBSD : FreeBSD -- TCP spoofing vulnerability in pf(4) (9cbbc506-93c1-11ee-8e38-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9cbbc506-93c1-11ee-8e38-002590c1f29c advisory. - As part of its stateful TCP connection tracking implementation, pf performs sequence number validatio...

7.5CVSS7.4AI score0.00742EPSS
Exploits0References2
Rows per page
Query Builder