Lucene search
K

114 matches found

Circl
Circl
added 2026/05/20 6:32 a.m.3 views

CVE-2026-8624

creationtimestamp| type| source ---|---|--- 2026-05-20 06:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmbbu7gff22h...

6.1CVSS5.8AI score0.00089EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/30 12:19 a.m.5 views

WordPress Nexa Blocks plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Google Maps Widget vulnerability discovered by zer0gh0st in WordPress Plugin Nexa Blocks versions = 1.1.0...

6.4CVSS5.5AI score0.00032EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/08/23 9:27 a.m.1 views

CGA-JM7G-8624-CQ8V

Bulletin has no description...

10CVSS6.7AI score0.10579EPSS
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-8624 Malicious code in @malware-test-epoch-nines/test-mlw3-epoch-nines (npm)

The package @malware-test-epoch-nines/test-mlw3-epoch-nines was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:14 a.m.4 views

CVE-2019-8624

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 5.3. A remote attacker may be able to leak memory...

7.5CVSS6.2AI score0.02194EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2016-8624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '' character, and could instead be...

7.5CVSS7.2AI score0.01363EPSS
Exploits0References2
Circl
Circl
added 2024/09/24 5:42 a.m.0 views

CVE-2024-8624

creationtimestamp| type| source ---|---|--- 2024-09-24 05:42:15+00:00| seen| https://t.me/cvedetector/6242...

9.9CVSS4.8AI score0.00746EPSS
Exploits0References1
CVE
CVE
added 2024/09/24 2:31 a.m.46 views

CVE-2024-8624

CVE-2024-8624 affects the MDTF – Meta Data and Taxonomies Filter plugin for WordPress. Versions up to and including 1.3.3.3 are vulnerable to SQL Injection via the 'meta_key' attribute of the 'mdf_select_title' shortcode due to insufficient escaping and preparation of the existing SQL query. Expl...

9.9CVSS9.5AI score0.00746EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/09/24 2:31 a.m.15 views

CVE-2024-8624 MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection

The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'metakey' attribute of the 'mdfselecttitle' shortcode in all versions up to, and including, 1.3.3.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation...

9.9CVSS0.00746EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/09/24 12:0 a.m.10 views

WordPress WordPress Meta Data and Taxonomies Filter (MDTF) Plugin <= 1.3.3.3 is vulnerable to SQL Injection

Software WordPress Meta Data and Taxonomies Filter MDTF Type Plugin Vulnerable versions = 1.3.3.3 Fixed in 1.3.3.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-8624 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 72c934040045 Credits Krzysztof Zając...

9.9CVSS6.9AI score0.00746EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/04/27 12:0 a.m.32 views

RHEL 6 / 7 : httpd24 (RHSA-2018:3558)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3558 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. The httpd24 packages provide a recent stable release of...

10CVSS7AI score0.93618EPSS
Exploits0References89
Oracle linux
Oracle linux
added 2023/12/12 12:0 a.m.375 views

curl security update

7.29.0-59.0.3.el79.2 - load CA certificates even with --insecure Orabug: 32836997 - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug: 30568724 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers...

9.8CVSS8.3AI score0.09715EPSS
Exploits1
Circl
Circl
added 2023/12/10 6:51 p.m.0 views

CVE-2018-8624

creationtimestamp| type| source ---|---|--- 2023-12-10 18:51:29+00:00| seen| https://t.me/arpsyndicate/1677...

7.6CVSS7.6AI score0.19249EPSS
Exploits2References1
F5 Networks
F5 Networks
added 2023/02/21 6:33 p.m.35 views

K85235351: cURL and libcurl vulnerability CVE-2016-8624

Security Advisory Description curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL...

7.5CVSS7.5AI score0.01363EPSS
Exploits0Affected Software24
F5 Networks
F5 Networks
added 2023/02/21 6:6 p.m.29 views

K91090139: BIND vulnerability CVE-2020-8624

Security Advisory Description In BIND 9.9.12 - 9.9.13, 9.10.7 - 9.10.8, 9.11.3 - 9.11.21, 9.12.1 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.9.12-S1 - 9.9.13-S1, 9.11.3-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset o...

4.3CVSS6.5AI score0.01632EPSS
Exploits0Affected Software14
SUSE CVE
SUSE CVE
added 2023/02/15 4:1 a.m.1 views

SUSE CVE-2020-8624

In BIND 9.9.12 - 9.9.13, 9.10.7 - 9.10.8, 9.11.3 - 9.11.21, 9.12.1 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.9.12-S1 - 9.9.13-S1, 9.11.3-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abu...

4.3CVSS7.7AI score0.01632EPSS
Exploits0References112
OSV
OSV
added 2022/05/13 1:21 a.m.21 views

GHSA-W9RV-WWXR-VC3Q ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617,...

7.5CVSS7.5AI score0.44915EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.25 views

Slackware: Security Advisory (SSA:2020-234-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.9AI score0.18318EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.30 views

Slackware: Security Advisory (SSA:2016-308-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.04507EPSS
Exploits0References13
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2021-0036)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.02629EPSS
Exploits0References6
Rows per page
Query Builder