EUVD-2022-7651

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-7651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long...

CVE-2025-7651

The Earnware Connect plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ewhasrole' shortcode in all versions up to, and including, 1.0.74 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2025-7651

creationtimestamp| type| source ---|---|--- 2025-08-16 04:05:05+00:00| seen| Telegram/4O2ngCELqigjgEnAoQs90wQTMnRqoikalq98QwlOEw68k...

WordPress Earnware Connect plugin <= 1.0.73 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Earnware Connect versions = 1.0.73...

MAL-2025-7651 Malicious code in @crabas0npm2/ex-ipsum-excepturi (npm)

The package @crabas0npm2/ex-ipsum-excepturi was found to contain malicious code...

CVE-2018-7651

index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...

CVE-2024-7651

creationtimestamp| type| source ---|---|--- 2024-08-21 09:01:37+00:00| seen| https://t.me/cvedetector/3727 2025-07-24 18:47:03+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luq723yums2q...

CVE-2024-7651 App Builder – Create Native Android & iOS Apps On The Flight <= 4.2.6 - Unauthenticated Limited SQL Injection via app-builder-search

The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to limited SQL Injection via the ‘app-builder-search’ parameter in all versions up to, and including, 4.2.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...

WordPress App Builder Plugin <= 4.3.3 is vulnerable to SQL Injection

Software App Builder Type Plugin Vulnerable versions = 4.3.3 Fixed in 4.3.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-7651 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 4b83b8e2e95a Credits vgo0 Required privilege Unauthenticated Published 21...

SUSE CVE-2015-7651

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary...

CVE-2020-7651

Mode C: CVE-2020-7651 affects snyk-broker; all versions before 4.79.0 are vulnerable to an Arbitrary File Read. The flaw permits partial reads of internal network data via patch history from the GitHub Commits API. Root cause: insufficient access controls exposing internal resources to users with...

CVE-2019-7651

CVE-2019-7651 affects EPP.sys in Emsisoft Anti‑Malware prior to 2018.12. The root cause is that Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN, so files and directories inside the \.\EPP device are not properly protected, enabling unintended impersonation or object creation due ...

Fedora 28 : mosquitto (2018-d305559481)

Fix CVE-2017-7651 rhbz1551755, rhbz1551754 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Debian DSA-4325-1 : mosquitto - security update

It was discovered that mosquitto, an MQTT broker, was vulnerable to remote denial-of-service attacks that could be mounted using various vectors. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4325. The text...

[SECURITY] [DSA 4325-1] mosquitto security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4325-1 [email protected] https://www.debian.org/security/ Sebastien Delafond October 25, 2018 https://www.debian.org/security/faq -...

Fedora Update for mosquitto FEDORA-2018-a115b0b80e

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1409-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1409-1 : mosquitto security update

CVE-2017-7651 fix to avoid extraordinary memory consumption by crafted CONNECT packet from unauthenticated client CVE-2017-7652 in case all sockets/file descriptors are exhausted, this is a fix to avoid default config values after reloading configuration by SIGHUP signal For Debian 8 'Jessie',...

[SECURITY] [DLA 1409-1] mosquitto security update

Package : mosquitto Version : 1.3.4-2+deb8u2 CVE ID : CVE-2017-7651 CVE-2017-7652 CVE-2017-7651 fix to avoid extraordinary memory consumption by crafted CONNECT packet from unauthenticated client CVE-2017-7652 in case all sockets/file descriptors are exhausted, this is a fix to avoid default conf...