Lucene search
K

53 matches found

Circl
Circl
added 2026/05/28 6:59 a.m.4 views

CVE-2026-9228

creationtimestamp| type| source ---|---|--- 2026-05-28 06:59:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvh3s4ceh2p...

4.3CVSS5.8AI score0.00035EPSS
Exploits0References1
OSV
OSV
added 2026/04/11 8:18 p.m.0 views

MINI-9228-3VRP-MXP5

Bulletin has no description...

6.1CVSS5.7AI score0.00011EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.1 views

MiracleLinux 7 : ruby-2.0.0.648-39.0.4.el7.AXS7 (AXSA:2025-10964:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10964:04 advisory. CVE-2016-2337: Fix type confusion in canceleval Ruby's TclTkIp class method to prevent arbitrary code execution CVE-2017-9224: Fix stack...

9.8CVSS7.5AI score0.00805EPSS
Exploits5References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-9228

Malware in sbrugna...

6.5CVSS6.5AI score0.0014EPSS
Exploits1References3
OSV
OSV
added 2025/09/26 1:23 p.m.3 views

CLSA-2025-1758892982 php: Fix of CVE-2017-9228

CVE-2017-9228: fix heap out-of-bounds write in bitsetsetrange and parsecharclass functions...

9.8CVSS5.8AI score0.00585EPSS
Exploits1References1
OSV
OSV
added 2025/09/26 1:23 p.m.2 views

CLSA-2025-1758892974 php: Fix of CVE-2017-9228

CVE-2017-9228: fix heap out-of-bounds write in bitsetsetrange and parsecharclass functions...

9.8CVSS6.9AI score0.00585EPSS
Exploits1References1
Circl
Circl
added 2025/08/20 9:11 a.m.1 views

CVE-2025-9228

creationtimestamp| type| source ---|---|--- 2025-08-20 09:11:43+00:00| seen| Telegram/mdFm9mGwOTe0Xltjb6MxbPaL4Tjostx7fRinxlLn4Ec...

4.3CVSS4.8AI score0.00055EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/08/20 8:24 a.m.3 views

CVE-2025-9228 Insufficient authorization when creating notes

MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes which are intended only for administrative users...

4.3CVSS7.1AI score0.00055EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:23 a.m.4 views

CVE-2019-9228

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The 1 management SSH and 2 management TELNET features allow remote attackers to cause a denial of service connection slot exhaustion via 5...

7.5CVSS7.3AI score0.00563EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2017-9228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs ...

9.8CVSS7.5AI score0.00585EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/10/01 8:30 a.m.9 views

CVE-2024-9228 Loggedin – Limit Active Logins <= 1.3.1 - Reflected Cross-Site Scripting

The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6.4AI score0.02577EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/10/01 8:30 a.m.18 views

CVE-2024-9228 Loggedin – Limit Active Logins <= 1.3.1 - Reflected Cross-Site Scripting

The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.02577EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/10/01 12:0 a.m.16 views

WordPress Loggedin Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Loggedin Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9228 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ab329401c416 Credits vgo0 Required privilege...

6.1CVSS6.1AI score0.02577EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/06/06 12:9 p.m.9 views

CGA-3GRC-9228-R3MW

Bulletin has no description...

7.8CVSS7.5AI score0.00083EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.24 views

RHEL 5 : oniguruma (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - oniguruma: integer overflow in searchinrange function in regexec.c leads to out-of-bounds read...

10AI score0.14783EPSS
Exploits12References11
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.25 views

RHEL 6 : oniguruma (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - oniguruma: integer overflow in searchinrange function in regexec.c leads to out-of-bounds read...

10AI score0.14783EPSS
Exploits12References12
Tenable Nessus
Tenable Nessus
added 2023/12/04 12:0 a.m.42 views

Amazon Linux 2 : php (ALAS-2023-2375)

The version of php installed on the remote host is prior to 5.4.16-46. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2375 advisory. An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5...

9.8CVSS7.9AI score0.01479EPSS
Exploits3References10
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.106 views

Amazon Linux 2 : oniguruma (ALAS-2023-2311)

The version of oniguruma installed on the remote host is prior to 5.9.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2311 advisory. An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through...

9.8CVSS7.4AI score0.01242EPSS
Exploits4References10
Amazon
Amazon
added 2023/10/19 12:0 a.m.75 views

Important: oniguruma

Issue Overview: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in nextstateval during regular expression compilation. Octal numbers larger than 0xff are not handled correctly i...

9.8CVSS8.2AI score0.01242EPSS
Exploits4
F5 Networks
F5 Networks
added 2023/02/21 6:53 p.m.118 views

K43292324: PHP vulnerability CVE-2017-9228

Security Advisory Description An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitsetsetrange during regular expression compilation due to an uninitialized variable from an incorrect...

9.8CVSS8AI score0.00585EPSS
Exploits1
Rows per page
Query Builder