Lucene search
+L

62 matches found

vulnersOsv
vulnersOsv
added 2026/04/24 3:59 p.m.9 views

aws-encryption-sdk-cli (>=2.1.0 <=3.1.0), cloudformation-cli-python-lib (>=2.1.9 <=2.1.16) +4 more potentially affected by CVE-2026-6550 via aws-encryption-sdk (>=2.0.0 <=3.3.0)

aws-encryption-sdk PYPI version =2.0.0, =2.1.0, =2.1.9, =1.0.0, =1.0.1, =0.4.8, =25.11.0, =25.14.1 Source cves: CVE-2026-6550 Source advisory: OSV:GHSA-V638-38FC-RHFV...

5.7CVSS5.4AI score0.00096EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/04/24 3:59 p.m.10 views

core-aws (>=1.1.0 <=1.3.0), mind-castle (=0.4.7) potentially affected by CVE-2026-6550 via aws-encryption-sdk (>=4.0.0 <=4.0.3)

aws-encryption-sdk PYPI version =4.0.0, =1.1.0, =1.3.0 - mind-castle =0.4.7 Source cves: CVE-2026-6550 Source advisory: OSV:GHSA-V638-38FC-RHFV...

5.7CVSS5.8AI score0.00096EPSS
SaveExploits0
Circl
Circl
added 2026/04/23 8:20 p.m.8 views

CVE-2026-6550

creationtimestamp| type| source ---|---|--- 2026-04-23 20:20:50+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mk6tla7hwe2h...

5.7CVSS5.7AI score0.00096EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2026/04/20 8:12 p.m.9 views

core-aws (>=1.1.0 <=1.3.0), mind-castle (=0.4.7) potentially affected by CVE-2026-6550 via aws-encryption-sdk (>=4.0.0 <=4.0.3)

aws-encryption-sdk PYPI version =4.0.0, =1.1.0, =1.3.0 - mind-castle =0.4.7 Source cves: CVE-2026-6550 Source advisory: SNYK:PYTHON-AWSENCRYPTIONSDK-16115497...

5.7CVSS5.8AI score0.00096EPSS
SaveExploits0
Patchstack
Patchstack
added 2025/06/27 11:19 a.m.11 views

WordPress The Pack Elementor addon plugin <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin The Pack Elementor addons versions = 2.1.4...

6.4CVSS5.5AI score0.00254EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/06/27 8:15 a.m.11 views

CVE-2025-6550

The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slideroptions’ parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00254EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2025/06/27 7:22 a.m.7 views

CVE-2025-6550 The Pack Elementor addon <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slideroptions’ parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.5AI score0.00254EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2025/06/27 7:22 a.m.15 views

CVE-2025-6550 The Pack Elementor addon <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slideroptions’ parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00254EPSS
SaveExploits0References9
CVE
CVE
added 2025/06/27 7:22 a.m.44 views

CVE-2025-6550

CVE-2025-6550 concerns The Pack Elementor addon for WordPress (v

6.4CVSS5.5AI score0.00254EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.21 views

CentOS 6 : chromium-browser (RHSA-2020:3560)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3560 advisory. - Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

9.3CVSS7.9AI score0.29292EPSS
SaveExploits1References16
Vulnrichment
Vulnrichment
added 2024/07/10 3:32 a.m.16 views

CVE-2024-6550 Gravity Forms: Multiple Form Instances <= 1.1.1 - Unauthenticated Full Path Disclosure

The Gravity Forms: Multiple Form Instances plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.1. This is due to the plugin leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to retrieve the full path of...

5.3CVSS6.6AI score0.00456EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/07/10 12:0 a.m.11 views

WordPress Gravity Forms: Multiple Form Instances Plugin <= 1.1.1 is vulnerable to Full Path Disclosure (FPD)

Software Gravity Forms: Multiple Form Instances Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A5: Security Misconfiguration Classification Full Path Disclosure FPD CVE CVE-2024-6550 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID af3116244e6e Credits...

5.3CVSS6.6AI score0.00456EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/03/12 9:15 a.m.16 views

CVE-2024-2371

Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials...

6.2CVSS6.2AI score0.00183EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/12 8:49 a.m.24 views

CVE-2024-2371 Information exposure vulnerability in Korenix JetI/O 6550

Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials...

6.2CVSS6.5AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/12 8:49 a.m.77 views

CVE-2024-2371

CVE-2024-2371 affects Korenix JetI/O 6550 on firmware F208 Build:0817. The underlying issue is information exposure via the SNMP protocol, which transmits data in plaintext, allowing an attacker to intercept traffic and retrieve credentials (confidentiality impact reported as HIGH in CVSS). Docum...

6.2CVSS6.2AI score0.00183EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/12 12:0 a.m.7 views

Korenix JetI/O 6550 Information Disclosure Vulnerability

The Korenix JetI/O 6550 is an intelligent I/O server from Korenix. An information disclosure vulnerability exists in the Korenix JetI/O 6550 that stems from the SNMP protocol using clear text to transmit data...

6.2CVSS6.3AI score0.00183EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/12 12:0 a.m.7 views

PT-2024-20026 · Korenix · Korenix Jeti/O 6550

Name of the Vulnerable Software and Affected Versions: Korenix JetI/O 6550 version F208 Build:0817 Description: The issue concerns an information exposure vulnerability. It is related to the SNMP protocol, which transfers data in plaintext. This allows an attacker to intercept traffic and retriev...

6.2CVSS6.6AI score0.00183EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:2 a.m.2 views

SUSE CVE-2020-6550

Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.29292EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2022/05/31 12:0 a.m.46 views

GLSA-202008-07 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-07 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

9.3CVSS7.6AI score0.29292EPSS
SaveExploits1References15
NVD
NVD
added 2020/09/21 8:15 p.m.21 views

CVE-2020-6550

Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.3CVSS0.29292EPSS
SaveExploits0References6
Rows per page
Query Builder