Lucene search
K

37 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:58 a.m.3 views

CVE-2020-7245

Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if the username is known and emails are enabled on the CTFd instance. To exploit the vulnerability, one must register with a username identical to the victim's...

9.8CVSS7.2AI score0.00383EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-7245 Malicious code in @crabas0npm/dignissimos-quae-suscipit (npm)

The package @crabas0npm/dignissimos-quae-suscipit was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/21 9:49 p.m.3 views

CVE-2006-7245

Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service application crash via an APX file that lacks NULL termination...

4.3CVSS7AI score0.00443EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-7245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the pcre32copysubstring function in pcreget.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service WRITE...

7.8CVSS7.9AI score0.00436EPSS
Exploits0References3
OSV
OSV
added 2024/11/22 10:15 p.m.1 views

CVE-2024-7245

Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the targ...

7.8CVSS6.2AI score
Exploits0References1
OSV
OSV
added 2024/06/06 12:25 p.m.8 views

CGA-CR23-7245-4599

Bulletin has no description...

5.9CVSS6.7AI score0.54214EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.22 views

RHEL 6 : pcre (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pcre: stack-based buffer overflow write in pcre32copysubstring CVE-2017-7246 - In PCRE 8.41, the OPKETRMA...

8.8AI score0.00526EPSS
Exploits1References6
Circl
Circl
added 2024/02/20 12:26 p.m.1 views

CVE-2023-7245

creationtimestamp| type| source ---|---|--- 2024-02-20 12:26:47+00:00| seen| https://t.me/ctinow/188414 2024-02-20 12:31:10+00:00| seen| https://t.me/ctinow/188417 2024-02-21 15:18:40+00:00| seen| https://t.me/arpsyndicate/3838...

7.8CVSS4.8AI score0.00252EPSS
Exploits0References3
CVE
CVE
added 2024/02/20 11:8 a.m.4268 views

CVE-2023-7245

OpenVPN Connect contains a local arbitrary-code execution vulnerability (CVE-2023-7245) in the nodejs/Electron runtime context. Affected: OpenVPN Connect 3.0–3.4.3 on Windows and 3.0–3.4.7 on macOS. Root cause: improper configuration of the nodejs environment, enabling ELECTRON_RUN_AS_NODE to exe...

7.8CVSS7.4AI score0.00252EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2021:3652-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.07102EPSS
Exploits0References10
NVD
NVD
added 2020/01/23 11:15 p.m.12 views

CVE-2020-7245

Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if the username is known and emails are enabled on the CTFd instance. To exploit the vulnerability, one must register with a username identical to the victim's...

9.8CVSS9.6AI score0.00383EPSS
Exploits0References2
OSV
OSV
added 2020/01/23 11:15 p.m.9 views

CVE-2020-7245

Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if the username is known and emails are enabled on the CTFd instance. To exploit the vulnerability, one must register with a username identical to the victim's...

9.8CVSS7.1AI score
Exploits0References2
CVE
CVE
added 2020/01/23 10:47 p.m.103 views

CVE-2020-7245

Affected software : CTFd (open-source CTF platform). Vulnerable versions : 2.0.0–2.2.2. Root cause : Incorrect username validation in the registration process. Impact : Allows an attacker to take over an arbitrary account when emails are enabled, via username collision created by inserting whites...

9.8CVSS9.5AI score0.00383EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2018/08/13 12:0 a.m.28 views

Fedora Update for mingw-glib2 FEDORA-2018-3238d4da59

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.07102EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/08/13 12:0 a.m.27 views

Fedora Update for mingw-glibmm24 FEDORA-2018-3238d4da59

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.07102EPSS
Exploits0References2
CVE
CVE
added 2018/04/24 8:0 p.m.35 views

CVE-2013-7245

The CVE-2013-7245 issue affects SAP Sybase ASE 15.7 Backup Server component prior to SP51. The root cause is a failure to validate credentials, allowing remote attackers to bypass access restrictions and perform database dumps. Impact is exposure of data via unauthorized dumps; no exploitation de...

7.5CVSS7.5AI score0.00254EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2018/04/18 8:0 p.m.51 views

CVE-2018-7245

The CVE-2018-7245 vulnerability affects Schneider Electric’s 66074 MGE Network Management Card Transverse (installed in MGE UPS and MGE STS). Root cause: improper authorization in the device’s integrated web server (HTTP/HTTPS) that could allow an unauthenticated, remote attacker to modify UPS co...

9.1CVSS9.1AI score0.00435EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2017/05/11 2:1 p.m.25 views

CVE-2014-7245

CVE-2014-7245 is rejected; this entry does not correspond to an active vulnerability.

6.6AI score
Exploits0
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.9 views

CVE-2014-7245

...

Exploits0
NVD
NVD
added 2017/04/24 6:59 p.m.14 views

CVE-2015-7245

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. dot dot in the errorpage parameter...

7.5CVSS7.3AI score0.89373EPSS
Exploits5References3
Rows per page
Query Builder