Lucene search
K

74 matches found

CVE
CVE
added 2026/04/28 12:15 p.m.5 views

CVE-2026-7271

DV0x creative-ad-agent contains a path traversal vulnerability in the server component creative-ad-agent-server (file server/sdk-server.ts). Manipulating the argument req.params can be exploited remotely; exploit appears public. A rolling-release workflow means affected version details are not pu...

6.9CVSS5.5AI score0.00069EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/04/28 12:15 p.m.24 views

CVE-2026-7271 DV0x creative-ad-agent creative-ad-agent-server sdk-server.ts path traversal

A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcbdad6212f8a3. Impacted is an unknown function of the file server/sdk-server.ts of the component creative-ad-agent-server. Performing a manipulation of the argument req.params results in path traversal. Remote...

6.9CVSS0.00069EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.2 views

CVE-2023-49334

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report...

8.8CVSS8AI score0.00511EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-53317

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00511EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-53316

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00511EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-16065

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00663EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-7271 Malicious code in @crabas0npm/eaque-deserunt-quaerat-maxime (npm)

The package @crabas0npm/eaque-deserunt-quaerat-maxime was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/07/23 9:32 p.m.3 views

CVE-2025-7271

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

7.8CVSS8AI score0.00185EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/21 7:57 p.m.8 views

CVE-2025-7271 IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

7.8CVSS0.00185EPSS
Exploits0References1
Circl
Circl
added 2025/07/08 3:0 a.m.4 views

CVE-2025-7271

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-520/...

7.8CVSS6.9AI score0.00185EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2013-7271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The x25recvmsg function in net/x25/afx25.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure h...

4.9CVSS6.7AI score0.00046EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/25 12:0 a.m.9 views

Ubuntu 24.04 LTS : virtualenv vulnerability (USN-7271-2)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7271-2 advisory. USN-7271-1 fixed a vulnerability in virtualenv. This update provides the corresponding updates for Ubuntu 24.04 LTS. Tenable has extracted the preceding descripti...

8.4CVSS7.7AI score0.00226EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2025/02/19 12:0 a.m.9 views

Ubuntu: Security Advisory (USN-7271-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.7AI score0.00226EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/02/18 12:0 a.m.6 views

Ubuntu 20.04 LTS / 22.04 LTS : virtualenv vulnerability (USN-7271-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7271-1 advisory. It was discovered that virtualenv incorrectly handled paths when activating virtual environments. An attacker could possibly use this issue to execute...

8.4CVSS8.2AI score0.00226EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/04 11:7 p.m.6 views

CVE-2024-0269

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...

8.8CVSS7.9AI score0.00663EPSS
Exploits0References1
Circl
Circl
added 2024/07/25 3:14 p.m.0 views

CVE-2023-7271

creationtimestamp| type| source ---|---|--- 2024-07-25 15:14:39+00:00| seen| https://t.me/cvedetector/1629...

5.5CVSS4.8AI score0.00061EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/25 11:49 a.m.11 views

CVE-2023-7271

Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability...

5.5CVSS5.8AI score0.00061EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.14 views

RHEL 5 : eclipse (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - eclipse: Help Content web application vulnerable to multiple XSS CVE-2010-4647 - Multiple cross-site...

4.3CVSS6AI score0.11722EPSS
Exploits2References2
OSV
OSV
added 2024/05/22 6:15 p.m.1 views

CVE-2024-21791

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...

7.2CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/22 12:0 a.m.1 views

PT-2024-19059 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions below 7271 Description: The issue allows SQL Injection in the lockout history option. Note that non-admin users cannot exploit this vulnerability. Recommendations: For versions below 7271, update to...

7.2CVSS8.4AI score0.03EPSS
Exploits0References6
Rows per page
Query Builder