Lucene search
+L

18 matches found

Cvelist
Cvelist
added 2026/05/25 9:15 p.m.34 views

CVE-2026-9504 GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds

A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bitconvertTU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public...

4.8CVSS0.00176EPSS
SaveExploits0References7
OSV
OSV
added 2025/09/15 1:11 a.m.2 views

ECHO-9504-F3B5-B586

Bulletin has no description...

6.1CVSS9.4AI score0.00466EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.6 views

CVE-2025-9504

A vulnerability was detected in Campcodes Online Loan Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=saveplan. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now publ...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References1
Circl
Circl
added 2025/08/27 6:35 a.m.6 views

CVE-2025-9504

creationtimestamp| type| source ---|---|--- 2025-08-27 06:35:51+00:00| seen| https://gist.github.com/Darkcrai86/a330c7037969e937854b5a0f99c48cb4...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/27 3:32 a.m.25 views

CVE-2025-9504

CVE-2025-9504 affects Campcodes Online Loan Management System 1.0. The vulnerability is an SQL injection in an unknown functionality of the file /ajax.php?action=save_plan, caused by manipulation of the ID argument. Exploitation can be performed remotely, and public exploits are available. Techni...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References5Affected Software1
Circl
Circl
added 2024/11/26 8:25 a.m.20 views

CVE-2024-9504

creationtimestamp| type| source ---|---|--- 2024-11-26 08:25:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113548299150336172...

7.2CVSS6.9AI score0.0046EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/25 12:0 a.m.38 views

WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.15 is vulnerable to Cross Site Scripting (XSS)

Software Booking calendar, Appointment Booking System Type Plugin Vulnerable versions = 3.2.15 Fixed in 3.2.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9504 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

7.2CVSS5.6AI score0.0046EPSS
SaveExploits0References3Affected Software1
Circl
Circl
added 2019/10/23 8:27 p.m.8 views

CVE-2015-9504

creationtimestamp| type| source ---|---|--- 2019-10-23 20:27:54+00:00| seen| https://t.me/cibsecurity/7606 2024-01-17 16:07:24+00:00| seen| https://t.me/ctinow/169317...

6.1CVSS6.1AI score0.00934EPSS
SaveExploits2References2
CVE
CVE
added 2019/10/23 4:13 p.m.85 views

CVE-2015-9504

The CVE-2015-9504 entry describes an XSS vulnerability in the WordPress WeeklyNews theme prior to version 2.2.9, exploitable via the s parameter. Affected component/file: the weeklynews WordPress theme (pre-2.2.9). Root cause: reflected XSS through the s query parameter, allowing an attacker to i...

6.1CVSS6AI score0.00934EPSS
SaveExploits2References1Affected Software1
NVD
NVD
added 2018/10/02 7:29 p.m.27 views

CVE-2018-9504

In sdpcopyrawdata of sdpdiscovery.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

8.8CVSS8.8AI score0.00893EPSS
SaveExploits0References4
CVE
CVE
added 2018/10/02 7:0 p.m.51 views

CVE-2018-9504

CVE-2018-9504 affects Android Bluetooth SDP discovery: a possible out-of-bounds write in sdp_copy_raw_data (sdp_discovery.cc) due to an incorrect bounds check, enabling remote code execution with no user interaction. Affected Android versions include 7.0–9.0; exploitation status and specific patc...

8.8CVSS8.8AI score0.00893EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2018/02/01 5:29 p.m.19 views

CVE-2014-9504

The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attackers to access child groups via vectors related to membership inheritance...

7.5CVSS7.7AI score0.01612EPSS
SaveExploits0References4
CVE
CVE
added 2018/02/01 5:0 p.m.33 views

CVE-2014-9504

CVE-2014-9504 affects Drupal Open Atrium’s OG Subgroups module. When used with Open Atrium 7.x-2.x prior to 7.x-2.26, it allows a remote attacker to access child groups via vectors related to membership inheritance. Documents confirm the vulnerable configuration and the affected version range; no...

7.5CVSS7.4AI score0.01612EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2017/06/26 1:0 p.m.13 views

CVE-2017-9504

...

SaveExploits0
CVE
CVE
added 2017/06/26 1:0 p.m.33 views

CVE-2017-9504

CVE-2017-9504 is a reservation duplicate of CVE-2017-9741 and, per linked records, affects ProjectSend r754. The vulnerability is in install/make-config.php, allowing remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration...

9.4AI score
SaveExploits0
CVE
CVE
added 2017/05/11 2:1 p.m.25 views

CVE-2016-9504

CVE-2016-9504 entry is rejected/not used and does not represent an active vulnerability.

6.6AI score
SaveExploits0
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.12 views

CVE-2016-9504

...

SaveExploits0
OpenVAS
OpenVAS
added 2013/06/13 12:0 a.m.19 views

Fedora Update for socat FEDORA-2013-9504

Check for the Version of socat OpenVAS Vulnerability Test Fedora Update for socat FEDORA-2013-9504 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

2.6CVSS4.1AI score0.02061EPSS
SaveExploits0References2
Rows per page
Query Builder