Lucene search
+L

39 matches found

osv_cga
osv_cga
•added 2026/06/02 11:33 p.m.•33 views

CGA-6579-FJ5C-VX4P

Bulletin has no description...

8.2CVSS7.1AI score0.00406EPSS
SaveExploits0
Circl
Circl
•added 2026/04/20 12:18 a.m.•20 views

CVE-2026-6579

creationtimestamp| type| source ---|---|--- 2026-04-20 00:18:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjv6yj77vb2v...

6.9CVSS6.7AI score0.00433EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/19 10:16 p.m.•40 views

CVE-2026-6579

A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing authentication. The attack may be initiated remotely. The exploit has been made available to the...

6.9CVSS0.00433EPSS
SaveExploits0References4
Circl
Circl
•added 2025/06/24 8:48 p.m.•20 views

CVE-2025-6579

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19406...

9.8CVSS7.3AI score0.00481EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/24 8:15 p.m.•19 views

CVE-2025-6579

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00481EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/23 3:21 a.m.•16 views

CVE-2023-6579

A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file /b2b-supermarket/shopping-cart of the component POST Parameter Handler. The manipulation of the argument estimatecountryid leads to sql injection. Th...

9.8CVSS7.2AI score0.24027EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2025/05/22 10:19 a.m.•20 views

CVE-2019-6579

A vulnerability has been identified in Spectrum Power 4 with Web Office Portal. An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system commands with administrative privileges. The security vulnerability could be exploited by an unauthenticated attacker wi...

9.8CVSS8.2AI score0.02285EPSS
SaveExploits0References1
Circl
Circl
•added 2024/07/16 12:55 p.m.•21 views

CVE-2024-6579

creationtimestamp| type| source ---|---|--- 2024-07-16 12:55:39+00:00| seen| https://t.me/cvedetector/925...

4.3CVSS5.7AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/16 10:15 a.m.•30 views

CVE-2024-6579

The Web and WooCommerce Addons for WPBakery Builder plugin for WordPress is vulnerable to unauthorized plugin settings modification due to a missing capability check on several plugin functions in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with...

4.3CVSS0.00359EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/07/16 9:32 a.m.•39 views

CVE-2024-6579 Web and WooCommerce Addons for WPBakery Builder <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification

The Web and WooCommerce Addons for WPBakery Builder plugin for WordPress is vulnerable to unauthorized plugin settings modification due to a missing capability check on several plugin functions in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with...

4.3CVSS0.00359EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2024/07/16 12:00 a.m.•22 views

WordPress Web and WooCommerce Addons for WPBakery Builder Plugin <= 1.4.5 is vulnerable to Broken Access Control

Software Web and WooCommerce Addons for WPBakery Builder Type Plugin Vulnerable versions = 1.4.5 Fixed in 1.4.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-6579 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 63d9a3de3691 Credit...

4.3CVSS6.9AI score0.00359EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•47 views

Ubuntu 20.04 LTS / 22.04 ESM / 23.04 / 23.10 : Xerces-C++ vulnerability (USN-6579-2)

The remote Ubuntu 20.04 LTS / 22.04 ESM / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6579-2 advisory. USN-6579-1 fixed a vulnerability in Xerces-C++. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,...

8.1CVSS7.6AI score0.09503EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/11 12:00 a.m.•36 views

Ubuntu 16.04 ESM / 18.04 ESM : Xerces-C++ vulnerability (USN-6579-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6579-1 advisory. It was discovered that Xerces-C++ was not properly handling memory management operations when parsing XML data containing external DTDs, which could...

8.1CVSS7.9AI score0.09503EPSS
SaveExploits0References2
Circl
Circl
•added 2023/12/30 5:07 p.m.•23 views

CVE-2023-6579

creationtimestamp| type| source ---|---|--- 2023-12-30 17:07:07+00:00| seen| https://t.me/ctinow/160916...

9.8CVSS7.1AI score0.24027EPSS
SaveExploits3References1
zdt
zdt
•added 2023/12/08 12:00 a.m.•453 views

osCommerce 4 SQL Injection Vulnerability

Exploit Title: osCommerce 4 - SQL Injection Exploit Author: CraCkEr Date: 22/11/2023 Vendor: osCommerce ltd. Vendor Homepage: https://www.oscommerce.com/ Software Link: https://demo.oscommerce.com/ Demo Link: https://demo.oscommerce.com/b2b-supermarket/ Tested on: Windows 11 Home Impact: Database...

9.8CVSS9.7AI score0.24027EPSS
SaveExploits3
Cvelist
Cvelist
•added 2023/12/07 9:31 p.m.•51 views

CVE-2023-6579 osCommerce POST Parameter shopping-cart sql injection

A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknown functionality of the file /b2b-supermarket/shopping-cart of the component POST Parameter Handler. The manipulation of the argument estimatecountryid leads to sql injection. Th...

7.5CVSS10AI score0.24027EPSS
SaveExploits3References3
CVE
CVE
•added 2023/12/07 9:31 p.m.•64 views

CVE-2023-6579

CVE-2023-6579 affects osCommerce 4, specifically the POST Parameter Handler for /b2b-supermarket/shopping-cart where the argument estimate[country_id] is vulnerable to SQL injection. The issue potentially enables remote exploitation with high impact on confidentiality, integrity, and availability...

9.8CVSS8.8AI score0.24027EPSS
SaveExploits3References3Affected Software1
Mend
Mend
•added 2022/11/07 12:00 a.m.•7 views

MSC-2022-6579

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

8.7CVSS5.8AI score
SaveExploits0References1
ArchLinux
ArchLinux
•added 2020/09/09 12:00 a.m.•52 views

[ASA-202009-6] chromium: multiple issues

Arch Linux Security Advisory ASA-202009-6 ========================================= Severity: High Date : 2020-09-09 CVE-ID : CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-6579 Package : chromium Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1225...

9.6CVSS0.8AI score0.01769EPSS
SaveExploits1References12
osv_cve
osv_cve
•added 2020/04/30 2:15 p.m.•21 views

CVE-2020-6579

Cross-site scripting XSS vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloadercore.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloadermode parameter...

6.1CVSS6.5AI score0.00823EPSS
SaveExploits1References1
Rows per page
Query Builder