Lucene search
+L

35 matches found

OSV
OSV
added 2026/06/11 8:15 a.m.8 views

CGA-V8WJ-6895-GRC3

Bulletin has no description...

8.8CVSS5.2AI score0.05236EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/05/23 4:27 a.m.15 views

CVE-2026-6895

The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Disclosure and Privilege Escalation in versions up to and including 3.30.1. This is due to the missing capability checks in the 'exportsettings' function. This function returns the RES...

8.8CVSS5.8AI score0.00248EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2026/02/23 12:0 a.m.14 views

VulnCheck KEV: CVE-2023-6895

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

9.8CVSS5.5AI score0.89138EPSS
SaveIn wildExploits2References8
OSV
OSV
added 2026/02/01 1:37 a.m.0 views

MINI-6895-JGQ4-83R8

Bulletin has no description...

5.3CVSS7.2AI score0.00276EPSS
SaveExploits0
Circl
Circl
added 2025/08/03 7:31 a.m.8 views

CVE-2025-6895

creationtimestamp| type| source ---|---|--- 2025-08-03 07:31:35+00:00| seen| https://t.me/bhhub/1120 2025-08-03 07:31:35+00:00| seen| https://t.me/bhhub/858...

9.8CVSS5.7AI score0.00665EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/07/25 9:38 p.m.8 views

WordPress MelaPress Login Security plugin 2.1.0-2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function

Authentication Bypass to Privilege Escalation via getvaliduserbasedontoken Function vulnerability discovered by kr0d in WordPress Plugin MelaPress Login Security versions 2.1.0-2.1.1...

9.8CVSS6.8AI score0.00665EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 2:7 a.m.16 views

CVE-2023-6895

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

9.8CVSS7.6AI score0.89138EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2024/08/05 12:0 a.m.77 views

Ubuntu: Security Advisory (USN-6895-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.00756EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/08/02 12:0 a.m.143 views

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6895-4)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6895-4 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

7.8CVSS7.5AI score0.00756EPSS
SaveExploits1References100
Circl
Circl
added 2024/07/19 5:52 p.m.7 views

CVE-2024-6895

creationtimestamp| type| source ---|---|--- 2024-07-19 17:52:53+00:00| seen| https://t.me/cvedetector/1216...

6.1CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/19 2:47 p.m.9 views

CVE-2024-6895 Insecure Account Profile Management

Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compromised user session to change critical security information without re-authentication. An attacker with user session and access to application can modify settings such as passwor...

6.1CVSS6.9AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/19 2:47 p.m.45 views

CVE-2024-6895

CVE-2024-6895 affects Yugabyte Platform: Insufficient authentication in user account management could allow a local-network attacker with a compromised session to change critical security settings (e.g., password, email) without re-authenticating, enabling account takeover. Exploitation details a...

6.1CVSS6.9AI score0.0024EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/07/19 12:0 a.m.82 views

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6895-3)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6895-3 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

7.8CVSS7.5AI score0.00756EPSS
SaveExploits1References100
OpenVAS
OpenVAS
added 2024/07/19 12:0 a.m.22 views

Ubuntu: Security Advisory (USN-6895-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS9.8AI score0.00756EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/07/17 12:0 a.m.18 views

Ubuntu: Security Advisory (USN-6895-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS9AI score0.00756EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/07/16 12:0 a.m.64 views

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6895-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6895-2 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

7.8CVSS6.9AI score0.00756EPSS
SaveExploits1References100
OpenVAS
OpenVAS
added 2024/07/15 12:0 a.m.24 views

Ubuntu: Security Advisory (USN-6895-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS9.7AI score0.00756EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2024/02/07 9:28 a.m.377 views

Exploit for OS Command Injection in Hikvision Intercom_Broadcast_System

CVE-2023-6895 Vulnerability Scanner This is a simple Python s...

9.8CVSS6.9AI score0.89138EPSS
SaveExploits2
Circl
Circl
added 2023/12/18 3:47 p.m.6 views

CVE-2023-6895

creationtimestamp| type| source ---|---|--- 2023-12-18 15:47:49+00:00| seen| https://t.me/ctinow/155945 2023-12-28 05:02:32+00:00| seen| https://t.me/arpsyndicate/2194 2024-01-02 18:16:21+00:00| seen| https://t.me/ctinow/161933 2024-03-01 19:58:51+00:00| seen| https://t.me/arpsyndicate/4109...

9.8CVSS6.8AI score0.89138EPSS
SaveExploits2References8
CVE
CVE
added 2023/12/17 8:0 a.m.123 views

CVE-2023-6895

Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) contains an OS command injection in /php/ping.php via jsondata[ip], where the attacker-provided input (e.g., netstat -ano) can execute commands. Public exploit details exist; upgrading to version 4.1.0 addresses the issue.

9.8CVSS7.5AI score0.89138EPSS
SaveIn wildExploits2References3Affected Software1
Rows per page
Query Builder