Lucene search
+L

74 matches found

OSV
OSV
added 2026/07/01 9:40 a.m.5 views

CGA-GQM4-25J6-6666

Bulletin has no description...

8.8CVSS6.8AI score0.00403EPSS
SaveExploits0
OSV
OSV
added 2026/06/23 11:17 p.m.2 views

MINI-6666-JWX2-G5PR

Bulletin has no description...

5.4CVSS5.7AI score0.00297EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/20 7:18 p.m.19 views

CVE-2026-6666 vulnerabilities

Vulnerabilities for packages: pgbouncer...

7.5CVSS5.8AI score0.00369EPSS
SaveExploits0
OSV
OSV
added 2026/05/09 1:16 a.m.5 views

DEBIAN-CVE-2026-6666

A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field...

7.5CVSS5.8AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/09 1:16 a.m.8 views

UBUNTU-CVE-2026-6666

A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field...

7.5CVSS5.8AI score0.00369EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/09 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-6666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field. CVE-2026-6666 No...

7.5CVSS6.3AI score0.00369EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/03/04 11:44 p.m.9 views

CVE-2026-3234

A flaw was found in modproxycluster. This vulnerability, a Carriage Return Line Feed CRLF injection in the decodeenc function, allows a remote attacker to bypass input validation. By injecting CRLF sequences into the cluster configuration, an attacker can corrupt the response body of INFO endpoin...

4.3CVSS5.7AI score0.00332EPSS
SaveExploits0References3
Circl
Circl
added 2025/12/01 8:3 a.m.6 views

CVE-2025-6666

creationtimestamp| type| source ---|---|--- 2025-12-01 08:03:30+00:00| seen| https://gist.github.com/Darkcrai86/29e6d62ad8ceb0bdf2962dde846b2605...

2CVSS5.8AI score0.00129EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/29 9:2 a.m.17 views

CVE-2025-6666 motogadget mo.lock Ignition Lock NFC hard-coded key

A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing manipulation can lead to use of hard-coded cryptographic key . The physical device can be targeted for the attack. ...

2CVSS0.00129EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-16791

Malware in sbrugna...

9.8CVSS9.2AI score0.01624EPSS
SaveExploits1References3
OSV
OSV
added 2025/08/23 10:48 a.m.2 views

CGA-FW97-6666-8FCH

Bulletin has no description...

8.3CVSS7.2AI score0.03746EPSS
SaveExploits0
OSV
OSV
added 2025/08/23 9:26 a.m.0 views

CGA-98V9-6666-8X3P

Bulletin has no description...

9.6CVSS9.4AI score0.05437EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:46 a.m.13 views

CVE-2019-6666

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

7.5CVSS6.9AI score0.01044EPSS
SaveExploits0References1
Circl
Circl
added 2024/07/11 9:57 a.m.8 views

CVE-2024-6666

creationtimestamp| type| source ---|---|--- 2024-07-11 09:57:20+00:00| seen| https://t.me/cvedetector/639...

8.8CVSS4.8AI score0.00535EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/11 6:43 a.m.20 views

CVE-2024-6666 WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id

The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendorid’ and 'status' parameter in all versions up to, and including, 1.13.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

8.8CVSS5.9AI score0.00535EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/11 6:43 a.m.73 views

CVE-2024-6666

WP ERP for WordPress is vulnerable to SQL Injection via vendor_id in versions up to 1.13.0. The flaw stems from insufficient escaping and query preparation, enabling authenticated attackers with Accounting Manager+ permissions (erp_ac_view_sales_summary) to inject additional SQL into existing que...

8.8CVSS5.9AI score0.00535EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/07/11 6:43 a.m.42 views

CVE-2024-6666 WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id

The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendorid’ and 'status' parameter in all versions up to, and including, 1.13.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

8.8CVSS0.00535EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/07/11 12:0 a.m.15 views

WordPress WP ERP Plugin <= 1.13.0 is vulnerable to SQL Injection

Software WP ERP Type Plugin Vulnerable versions = 1.13.0 Fixed in 1.13.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-6666 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 89623a7b5068 Credits Edwin Siebel edwinsiebel Required privilege Shop Manager...

8.8CVSS6.9AI score0.00535EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/06/06 12:28 p.m.8 views

CGA-Q3MV-QJ35-6666

Bulletin has no description...

9.8CVSS9.5AI score0.00589EPSS
SaveExploits0
OSV
OSV
added 2024/06/06 12:21 p.m.20 views

CGA-2XJJ-6666-9X77

Bulletin has no description...

7.5CVSS7.5AI score0.08676EPSS
SaveExploits0
Rows per page
Query Builder