Lucene search
K

129 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

MiracleLinux 7 : groovy-1.8.9-8.el7 (AXSA:2017-2200:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2200:01 advisory. Groovy is an agile and dynamic language for the Java Virtual Machine, built upon Java with features inspired by languages like Python, Ruby and Smalltalk. It...

9.8CVSS8AI score0.24315EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-6814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume...

9.8CVSS8.7AI score0.00832EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/04 1:44 a.m.6 views

CVE-2025-6814 Booking X 1.0 - 1.1.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via export_now() Function

The Booking X plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportnow function in versions 1.0 to 1.1.2. This makes it possible for unauthenticated attackers to download all plugin data, including user accounts, user meta, and PayPal...

7.5CVSS0.0038EPSS
Exploits0References4
CVE
CVE
added 2025/07/04 1:44 a.m.21 views

CVE-2025-6814

CVE-2025-6814 affects Booking X for WordPress (versions 1.0–1.1.2). The root cause is a missing capability check in export_now(), allowing unauthenticated attackers to download all plugin data (including user accounts, user meta, and PayPal credentials) via a crafted POST request. Public details ...

7.5CVSS6.4AI score0.0038EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/07/04 1:44 a.m.3 views

CVE-2025-6814 Booking X 1.0 - 1.1.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via export_now() Function

The Booking X plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportnow function in versions 1.0 to 1.1.2. This makes it possible for unauthenticated attackers to download all plugin data, including user accounts, user meta, and PayPal...

7.5CVSS7AI score0.0038EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/07/03 11:18 p.m.5 views

WordPress Booking X plugin 1.0-1.1.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability discovered by kr0d in WordPress Plugin Booking X versions 1.0-1.1.2...

7.5CVSS6.3AI score0.0038EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 3:49 a.m.3 views

CVE-2023-6814

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-...

5.6CVSS6.8AI score0.00015EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2016-6814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization...

9.8CVSS7.1AI score0.24315EPSS
Exploits0References1
Circl
Circl
added 2024/08/21 7:5 p.m.1 views

CVE-2024-6814

creationtimestamp| type| source ---|---|--- 2024-08-21 19:05:08+00:00| seen| https://t.me/cvedetector/3784...

8.8CVSS8.1AI score0.10078EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/21 4:9 p.m.13 views

CVE-2024-6814 NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability

NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this...

8.8CVSS8.9AI score0.10078EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/06/07 12:0 a.m.15 views

Ubuntu: Security Advisory (USN-6814-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS8.2AI score0.00325EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.20 views

RHEL 7 : groovy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Apache Groovy: Remote code execution via deserialization CVE-2016-6814 Note that Nessus has not tested for this iss...

9.8CVSS9.8AI score0.24315EPSS
Exploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/03/13 3:10 a.m.0 views

Information Exposure Vulnerability in Cosminexus Component Container

Overview An information exposure vulnerability CVE-2023-6814 exists in Cosminexus Component Container. Affected products and versions are listed below. Please upgrade your version to the appropriate version. These vulnerabilities exist in Cosminexus Component Container which is a component produc...

5.6CVSS6.6AI score0.00015EPSS
Exploits0References4
Circl
Circl
added 2024/03/12 5:27 a.m.0 views

CVE-2023-6814

creationtimestamp| type| source ---|---|--- 2024-03-12 05:27:00+00:00| seen| https://t.me/ctinow/205307 2024-03-12 05:27:01+00:00| seen| https://t.me/ctinow/205308...

5.6CVSS5.6AI score0.00015EPSS
Exploits0References2
NVD
NVD
added 2024/03/12 4:15 a.m.8 views

CVE-2023-6814

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-...

5.6CVSS5.6AI score0.00015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/12 3:39 a.m.11 views

CVE-2023-6814 Information Exposure Vulnerability in Cosminexus Component Container

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-...

5.6CVSS6.8AI score0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/12 3:39 a.m.14 views

CVE-2023-6814 Information Exposure Vulnerability in Cosminexus Component Container

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-...

5.6CVSS5.8AI score0.00015EPSS
Exploits0References1
CVE
CVE
added 2024/03/12 3:39 a.m.129 views

CVE-2023-6814

The CVE-2023-6814 issue affects Hitachi Cosminexus Component Container and is caused by insertion of sensitive information into log files, leading to local information disclosure. Affected versions include 11-00 through 11-00-12, 11-10 through 11-10-10, 11-20 through 11-20-07, 11-30 through 11-30...

5.6CVSS5.6AI score0.00015EPSS
Exploits0References1
Circl
Circl
added 2024/01/15 2:41 p.m.1 views

CVE-2016-6814

creationtimestamp| type| source ---|---|--- 2024-01-15 14:41:13+00:00| seen| https://t.me/ctinow/168381 2025-12-13 20:32:11+00:00| seen| https://gist.github.com/might-might/40e680f1f9ce10e8b91c6629d1f0fec9 2025-12-13 20:32:46+00:00| seen|...

9.8CVSS8.5AI score0.24315EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/10/31 2:45 a.m.2 views

SUSE CVE-2016-6814

When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized...

9.8CVSS9.2AI score0.24315EPSS
Exploits0References2
Rows per page
Query Builder