Lucene search
K

42 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-6709

Malware in sbrugna...

9.8CVSS9.5AI score0.01589EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2016-6709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in Conscrypt and BoringSSL in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a man-in-the-middle...

5.9CVSS6.6AI score0.00521EPSS
Exploits0References2
Circl
Circl
added 2025/06/26 5:50 p.m.8 views

CVE-2025-6709

creationtimestamp| type| source ---|---|--- 2025-06-26 17:50:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19639 2025-06-26 19:24:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsju3nvfee2a 2025-06-27 07:12:25+00:00| seen|...

7.5CVSS7.7AI score0.00466EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2025/05/23 8:0 a.m.7 views

CVE-2024-6709

The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'spsaddupdatepost' function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access an...

4.3CVSS6.5AI score0.00323EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/08/05 12:0 a.m.17 views

WordPress Sync Post With Other Site Plugin <= 1.6 is vulnerable to Broken Access Control

Software Sync Post With Other Site Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-6709 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 159a5eca941a Credits Lucio Sá Required...

4.3CVSS6.6AI score0.00323EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2024/08/03 3:5 p.m.3 views

CVE-2024-6709

creationtimestamp| type| source ---|---|--- 2024-08-03 15:05:43+00:00| seen| https://t.me/cvedetector/2391...

4.3CVSS4.8AI score0.00323EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/03 11:37 a.m.29 views

CVE-2024-6709 Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update

The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'spsaddupdatepost' function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access an...

4.3CVSS0.00323EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.10 views

RHEL 6 : elinks (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - elinks/links: does not properly verify SSL certificates CVE-2012-6709 Note that Nessus has not tested for this issu...

5.9CVSS5.8AI score0.00588EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.9 views

RHEL 7 : elinks (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - elinks/links: does not properly verify SSL certificates CVE-2012-6709 Note that Nessus has not tested for this issu...

5.9CVSS5.8AI score0.00588EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/03/21 12:0 a.m.44 views

Ubuntu 18.04 LTS : OpenSSL vulnerabilities (USN-6709-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6709-1 advisory. It was discovered that checking excessively long DH keys or parameters may be very slow. A remote attacker could possibly use this issue to cause OpenSSL...

5.5CVSS6.6AI score0.05533EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2023/12/12 6:30 a.m.7 views

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +340 more potentially affected by CVE-2023-6709 via mlflow (>=0.8.2 <=2.9.1)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-6709 Source advisory: OSV:GHSA-CXFR-5Q3R-2RC2...

10CVSS7.7AI score0.0093EPSS
Exploits1
OSV
OSV
added 2023/12/12 4:15 a.m.16 views

CVE-2023-6709

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

8.8CVSS9.5AI score
Exploits0References2
vulnersOsv
vulnersOsv
added 2023/12/12 4:15 a.m.5 views

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +340 more potentially affected by CVE-2023-6709 via mlflow (>=0.8.2 <=2.9.1)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-6709 Source advisory: OSV:PYSEC-2023-281...

10CVSS7.7AI score0.0093EPSS
Exploits1
Cvelist
Cvelist
added 2023/12/12 4:5 a.m.19 views

CVE-2023-6709 Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

10CVSS8.9AI score0.0093EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/12/12 4:5 a.m.11 views

CVE-2023-6709 Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

10CVSS7.1AI score0.0093EPSS
Exploits1References2
CVE
CVE
added 2023/12/12 4:5 a.m.50 views

CVE-2023-6709

CVE-2023-6709 affects mlflow/mlflow up to version 2.9.1 (prior to 2.9.2). The issue is improper neutralization of special elements used in a template engine (Jinja2), enabling template injection with potential arbitrary code execution. Affected component: mlflow/mlflow templates; root cause: inse...

10CVSS8.7AI score0.0093EPSS
Exploits1References2Affected Software1
Rosalinux
Rosalinux
added 2021/07/02 4:39 p.m.25 views

Advisory ROSA-SA-2021-1827

Software: elinks 0.12 OS: Cobalt 7.9 CVE-ID: CVE-2012-6709 CVE-Crit: MEDIUM CVE-DESC: ELinks 0.12 and Twibright Links 2.3 lack SSL certificate validation. CVE-STATUS: Default CVE-REV: Default...

5.9CVSS7.1AI score0.00588EPSS
Exploits0
Cvelist
Cvelist
added 2021/01/12 8:2 p.m.10 views

CVE-2020-6709

...

Exploits0
CVE
CVE
added 2021/01/12 8:2 p.m.24 views

CVE-2020-6709

CVE-2020-6709 entry is rejected/not used and does not represent an active vulnerability.

6.9AI score
Exploits0
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for elinks (EulerOS-SA-2019-2376)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS5.8AI score0.00588EPSS
Exploits0References2
Rows per page
Query Builder