Lucene search
K

30 matches found

OSV
OSV
added 2026/05/07 8:7 p.m.4 views

MAL-2026-3371 Malicious code in pycacheopt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cf50eae305079227b5283e08547cc201f941624c95e49460c3e6544cdd1e221b The extension module hides code that in specific circumstances executes given code. The malicious action is hidden only in the extension module with the...

5.9AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/07 8:7 p.m.6 views

Malicious code in pycacheopt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cf50eae305079227b5283e08547cc201f941624c95e49460c3e6544cdd1e221b The extension module hides code that in specific circumstances executes given code. The malicious action is hidden only in the extension module with the...

5.9AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/23 1:32 a.m.3 views

CVE-2026-2965

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The...

4.8CVSS3.4AI score0.00038EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/02/23 1:32 a.m.22 views

CVE-2026-2965 07FLYCMS/07FLY-CMS/07FlyCRM System Extension edit.html cross site scripting

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The...

4.8CVSS0.00038EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/02/23 12:0 a.m.3 views

PT-2026-21489

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The...

4.8CVSS3.3AI score0.00038EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.1 views

PT-2025-51894

Name of the Vulnerable Software and Affected Versions RIOT versions prior to 2025.10 Description RIOT OS, designed for IoT and embedded devices, contains a flaw in its IPv6 fragmentation reassembly process. Specifically, the implementation lacks a size check when copying the first fragment offset...

9.8CVSS8AI score0.00668EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-9179

Malware in sbrugna...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References2
OSV
OSV
added 2024/12/12 1:15 p.m.0 views

CVE-2024-54119

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/12/12 12:15 p.m.1 views

CVE-2024-54117

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/12 12:0 a.m.2 views

PT-2024-36052 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS6.8AI score0.00191EPSS
Exploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.32 views

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter

Summary OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module forIBM BladeCenter use OpenSSL and have...

7.5CVSS7.4AI score0.51896EPSS
Exploits1Affected Software3
OSV
OSV
added 2021/08/10 6:15 p.m.15 views

CVE-2021-38140

The setuser extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after setuser...

9.8CVSS7.2AI score
Exploits0References2
NVD
NVD
added 2019/03/07 11:29 p.m.8 views

CVE-2018-17426

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...

5.4CVSS5.2AI score0.00206EPSS
Exploits1References1
Prion
Prion
added 2019/03/07 11:29 p.m.7 views

Cross site scripting

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...

3.5CVSS5.2AI score0.00206EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/03/07 10:0 p.m.35 views

CVE-2018-17426

WUZHI CMS 4.1.0 is affected by a stored XSS vulnerability in the Extension module, specifically the "SMS in station" field under index.php?m=core. The issue is caused by improper input handling in that field, enabling arbitrary HTML/JS injection. No exploit details or remediation are provided in ...

5.4CVSS5.1AI score0.00206EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/03/07 10:0 p.m.13 views

CVE-2018-17426

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...

5.2AI score0.00206EPSS
Exploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2019/01/31 2:25 a.m.23 views

Security Bulletin: Vulnerability in libssh2 affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware and QLogic Virtual Fabric Extension Module for IBM BladeCenter (CVE-2016-0787)

Summary Vulnerability in libssh2 affects IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware and QLogic Virtual Fabric Extension Module for IBM BladeCenter. Vulnerability Details Summary Vulnerability in libssh2 affects IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware and...

5.9CVSS0.3AI score0.03148EPSS
Exploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2019/01/31 2:25 a.m.22 views

Security Bulletin: Vulnerability in SSL affects IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter

Summary An SSL vulnerability was disclosed by the OpenSSL Project. IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter have addressed the applicable CVE...

7.5CVSS0.5AI score0.71356EPSS
Exploits1
CVE
CVE
added 2019/01/02 2:0 p.m.50 views

CVE-2018-5197

The CVE-2018-5197 entry concerns ExtCommon.dll (Xplatform ActiveX) versions 9.2, 9.2.1, 9.2.2, where insufficient input validation of command parameters enables a command injection. According to NVD, the vulnerability allows an attacker to execute arbitrary commands, with impact on confidentialit...

7.8CVSS7.8AI score0.01092EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2018/04/26 12:0 a.m.2 views

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-08584)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in the system announcement feature of the extension module in WUZHI CMS version 4.1.0. A remote attacker can exploit th...

4.8CVSS6.1AI score0.00235EPSS
Exploits1References1
Rows per page
Query Builder