Lucene search
K

29 matches found

OSV
OSV
added 2026/04/22 10:11 a.m.2 views

RHSA-2026:9290 Red Hat Security Advisory: giflib security update

Bulletin has no description...

7CVSS5.6AI score0.00019EPSS
Exploits0References9
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-9290 Malicious code in @sellerly/slr-feedback-form (npm)

The package @sellerly/slr-feedback-form was found to contain malicious code...

7.2AI score
Exploits0
Circl
Circl
added 2025/07/15 10:0 a.m.4 views

CVE-2019-9290

creationtimestamp| type| source ---|---|--- 2025-07-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-196-01...

7.8CVSS7.4AI score0.00011EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:54 p.m.6 views

CVE-2020-9290

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading...

7.8CVSS7.6AI score0.00049EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:22 a.m.3 views

CVE-2019-9290

In tzdata there is possible memory corruption due to a mismatch between allocation and deallocation functions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

7.8CVSS7.3AI score0.00011EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2024/12/24 12:4 a.m.685 views

Exploit for CVE-2024-9290

CVE-2024-9290 Exploit Tool | Super Backup & Clone Vulnerabilit...

9.8CVSS9.7AI score0.67654EPSS
Exploits2
GithubExploit
GithubExploit
added 2024/12/13 10:49 a.m.130 views

Exploit for CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migra...

9.8CVSS9.6AI score0.67654EPSS
Exploits2
NVD
NVD
added 2024/12/13 10:15 a.m.15 views

CVE-2024-9290

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to, and including, 2.3.3. This makes it possible for...

9.8CVSS0.67654EPSS
Exploits2References2
Circl
Circl
added 2024/12/13 9:30 a.m.6 views

CVE-2024-9290

creationtimestamp| type| source ---|---|--- 2024-12-13 09:30:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113644811971420753 2024-12-13 12:25:39+00:00| seen| https://t.me/cvedetector/12853 2024-12-24 19:28:07+00:00| seen|...

9.8CVSS8.7AI score0.67654EPSS
Exploits2References6
Vulnrichment
Vulnrichment
added 2024/12/13 9:27 a.m.9 views

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to, and including, 2.3.3. This makes it possible for...

9.8CVSS9.8AI score0.67654EPSS
Exploits2References2
CVE
CVE
added 2024/12/13 9:27 a.m.59 views

CVE-2024-9290

CVE-2024-9290 affects the WordPress plugin Super Backup & Clone - Migrate for WordPress. The issue is an unauthenticated arbitrary file upload due to missing file-type validation and a missing capability check in ibk_restore_migrate_check(), present in all versions up to 2.3.3 according to the in...

9.8CVSS9.9AI score0.67654EPSS
Exploits2References2
Cvelist
Cvelist
added 2024/12/13 9:27 a.m.17 views

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to, and including, 2.3.3. This makes it possible for...

9.8CVSS0.67654EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2021/06/11 12:0 a.m.32 views

Oracle Linux 7 : rh-postgresql10-postgresql (ELSA-2021-9290)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9290 advisory. - Rebase to upstream release 10.15 Resolves: CVE-2020-25695 Resolves: CVE-2020-25694 Resolves: CVE-2020-25696 Tenable has extracted the preceding...

9CVSS6.6AI score0.23757EPSS
Exploits1References11
OpenVAS
OpenVAS
added 2020/04/16 12:0 a.m.61 views

Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2020-1491)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.02852EPSS
Exploits4References2
Tenable Nessus
Tenable Nessus
added 2020/04/16 12:0 a.m.64 views

EulerOS Virtualization 3.0.2.2 : freetype (EulerOS-SA-2020-1491)

According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The t42parseencoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for...

9.8CVSS6.8AI score0.02852EPSS
Exploits4References7
OSV
OSV
added 2020/03/15 10:15 p.m.1 views

CVE-2020-9290

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading...

7.8CVSS6.7AI score
Exploits0References1
CVE
CVE
added 2020/03/15 9:52 p.m.60 views

CVE-2020-9290

Fortinet FortiClient for Windows installers (online installers) 6.2.3 and earlier are affected by an Unsafe Search Path vulnerability (DLL hijacking). FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe could be tricked if an attacker controls the directory where these executable...

7.8CVSS7.8AI score0.00049EPSS
Exploits0References1Affected Software2
OpenVAS
OpenVAS
added 2020/02/25 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2020-1148)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.0049EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/02/25 12:0 a.m.23 views

EulerOS 2.0 SP8 : freetype (EulerOS-SA-2020-1148)

According to the version of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1GetPrivateDict where there is no check that the new values o...

9.8CVSS8.5AI score0.0049EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.28 views

Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2019-2148)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.02852EPSS
Exploits4References2
Rows per page
Query Builder