Lucene search
+L

782 matches found

ATTACKERKB
ATTACKERKB
added 2025/11/07 3:32 a.m.4 views

CVE-2025-64328

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the filestore module within the Administrative interface is vulnerable to a post-authentication command injection by an authenticated known user via the...

8.6CVSS5.7AI score0.84618EPSS
SaveIn wildExploits4References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.8 views

CVE-2020-36857

Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not...

8.6CVSS8AI score0.02134EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/31 12:30 a.m.9 views

EUVD-2020-30815

Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not...

8.6CVSS7.4AI score0.02134EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/30 10:15 p.m.4 views

CVE-2020-36857

Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not...

7.2CVSS6AI score
SaveExploits0References3
NVD
NVD
added 2025/10/30 10:15 p.m.9 views

CVE-2020-36857

Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not...

8.6CVSS0.02134EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/30 9:31 p.m.4 views

CVE-2020-36857 Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface Page

Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not...

8.6CVSS7.6AI score0.02134EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.9 views

PT-2025-44463

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.6.14 Description Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection issue in the SNMP Trap Interface page. Exploitation requires an account with administrative privileges to access the...

8.6CVSS7.7AI score0.02134EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/10/22 2:9 a.m.7 views

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

7.2CVSS7.7AI score0.01484EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/21 3:15 a.m.7 views

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

7.2CVSS0.01484EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/21 1:49 a.m.29 views

CVE-2025-8078

CVE-2025-8078 describes a post-authentication command-injection vulnerability in Zyxel devices: Zyxel ATP series firmware v4.32–v5.40, USG FLEX series v4.50–v5.40, USG FLEX 50(W) series v4.16–v5.40, and USG20(W)-VPN series v4.16–v5.40. An authenticated administrator can pass a crafted string as a...

7.2CVSS7.2AI score0.01484EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/21 1:49 a.m.5 views

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

7.2CVSS7.2AI score0.01484EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2012-6605

Malware in sbrugna...

9.4CVSS6.2AI score0.03102EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-26923

Malware in sbrugna...

4.8CVSS5.2AI score0.00578EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-19470

Malware in sbrugna...

9.1CVSS9AI score0.0285EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-5557

Malware in sbrugna...

6.1CVSS6.3AI score0.01954EPSS
SaveExploits3References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-9419

Malware in sbrugna...

8.1CVSS7.7AI score0.01432EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-43012

Malicious code in bioql PyPI...

6.5CVSS6.8AI score0.00803EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-54138

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.01052EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-47206

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.0211EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-52889

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01201EPSS
SaveExploits1References1
Rows per page
Query Builder