Lucene search
K

57 matches found

OSV
OSV
added 2026/01/29 12:49 a.m.3 views

CGA-7423-79R3-4W7Q

Bulletin has no description...

8.8CVSS7.3AI score0.00874EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

MiracleLinux 7 : glibc-2.17-105.el7 (AXSA:2015-569:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-569:01 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as t...

7.5CVSS8.2AI score0.04751EPSS
Exploits4References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2019-16287

Malware in sbrugna...

8.8CVSS6.9AI score0.00737EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2025/04/09 12:0 a.m.7 views

Ubuntu: Security Advisory (USN-7423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS5.2AI score0.00183EPSS
Exploits5References2
Circl
Circl
added 2024/09/13 5:57 p.m.1 views

CVE-2024-7423

creationtimestamp| type| source ---|---|--- 2024-09-13 17:57:57+00:00| seen| https://t.me/cvedetector/5611...

8.8CVSS4.8AI score0.00722EPSS
Exploits0References1
NVD
NVD
added 2024/09/13 3:15 p.m.12 views

CVE-2024-7423

The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1. This is due to missing or incorrect nonce validation on the networkoptionsaction function. This makes it possible for unauthenticated attackers to update arbitrary options that...

8.8CVSS0.00722EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/09/13 12:0 a.m.9 views

WordPress Stream Plugin <= 4.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Stream Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.0.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7423 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID c46db6dcec76 Credits vgo0 Required privilege...

8.8CVSS6.7AI score0.00722EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/05 12:0 a.m.42 views

CentOS: Security Advisory for bpftool (CESA-2023:7423)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00733EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/12/22 12:0 a.m.106 views

CentOS 7 : kernel (RHSA-2023:7423)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7423 advisory. - A use-after-free vulnerability in the Linux kernel's net/sched: clsu32 component can be exploited to achieve local privilege escalation. When u32chan...

7.8CVSS7.2AI score0.00733EPSS
Exploits1References8
F5 Networks
F5 Networks
added 2023/02/21 7:41 p.m.25 views

K16841: GNU C Library (glibc) vulnerability CVE-2013-7423

Security Advisory Description The senddg function in resolv/ressend.c in GNU C Library aka glibc or libc6 before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of request that trigger a call to the...

5CVSS7.7AI score0.03151EPSS
Exploits2Affected Software18
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/27 9:58 a.m.22 views

Security Bulletin: IBM InfoSphere Master Data Management Collaborative Edition affected by Cross-site Scripting security vulnerabilities (CVE-2015-7423)

Summary IBM InfoSphere Master Data Management - Collaborative Edition is vulnerable to Cross-Site Scripting. Vulnerability Details CVEID:CVE-2015-7423 DESCRIPTION: IBM InfoSphere Master Data Management Collaborative Edition is vulnerable to cross-site scripting, caused by improper validation of...

5.4CVSS6AI score0.00182EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.19 views

Mageia: Security Advisory (MGASA-2015-0195)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS9AI score0.04751EPSS
Exploits3References9
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/23 1:31 a.m.47 views

Security Bulletin: Vulnerabilities in GNU C Library Affect Power Hardware Management Console (CVE-2013-7423, CVE-2014-7817, CVE-2014-9402, CVE-2015-1472)

Summary GNU C Library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2013-7423 DESCRIPTION:The senddg function in resolv/ressend.c in GNU C Library aka glibc or libc6 before 2.20 does not properly reuse file descriptors,...

7.8CVSS8.8AI score0.087EPSS
Exploits5
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.38 views

SUSE: Security Advisory (SUSE-SU-2015:0439-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.4AI score0.8487EPSS
Exploits44References44
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.40 views

SUSE: Security Advisory (SUSE-SU-2015:0551-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.6AI score0.8487EPSS
Exploits48References51
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.31 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2019-1552)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.18703EPSS
Exploits10References2
NVD
NVD
added 2019/03/21 4:1 p.m.9 views

CVE-2019-7423

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter...

6.1CVSS6AI score0.01096EPSS
Exploits2References3
OSV
OSV
added 2019/03/21 4:1 p.m.1 views

CVE-2019-7423

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter...

6.1CVSS6.3AI score
Exploits0References3
Prion
Prion
added 2019/03/21 4:1 p.m.11 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of P...

6.8CVSS8.8AI score0.00737EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2019/03/19 7:56 p.m.53 views

CVE-2019-6729

CVE-2019-6729 is a remote-code-execution vulnerability in Foxit Reader and Foxit PhantomPDF for Windows caused by an out-of-bounds read during PDF processing due to improper validation of input data (read past end of allocated buffer). It requires user interaction (malicious page or file). Affect...

8.8CVSS8.8AI score0.00737EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder