Lucene search
K

11 matches found

Cvelist
Cvelist
added 2026/05/20 12:54 p.m.37 views

CVE-2026-24573 WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n/a before 4.0.0...

6.5CVSS0.00166EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/03/15 12:7 p.m.3 views

SUSE CVE-2017-18907

An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. XSS could occur via a channel header...

6.1CVSS5.8AI score0.0069EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/10 9:58 a.m.23 views

CVE-2026-25655

A vulnerability has been identified in SINEC NMS All versions V4.0 SP2. The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrative...

8.5CVSS0.00238EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:26 a.m.10 views

CVE-2023-4158

Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.3...

6.4CVSS6AI score0.00402EPSS
Exploits1References1
OSV
OSV
added 2025/03/11 10:15 a.m.2 views

CVE-2025-27393

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly sanitize user input when creating new users. This could allow an authenticated highly-privileged remote attacker to execute arbitrary code on the device...

8.6CVSS6.1AI score0.00666EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:59 a.m.2 views

SUSE CVE-2016-6628

An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicious SVG file. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.3CVSS6.8AI score0.0114EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/10/19 12:0 a.m.3 views

OcoMon 安全漏洞

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. A security vulnerability exists in versions prior to OcoMon 4.0RC1 that stems from incorrect access control...

7.5CVSS7.3AI score0.00785EPSS
Exploits1References4
OSV
OSV
added 2021/05/14 9:15 p.m.1 views

UBUNTU-CVE-2021-3402

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4...

9.1CVSS7.4AI score0.02219EPSS
Exploits1References5
CNVD
CNVD
added 2018/02/26 12:0 a.m.4 views

Squid Software Foundation Squid HTTP Caching Proxy Denial of Service Vulnerability (CNVD-2018-05766 )

Squid Software Foundation Squid HTTP Caching Proxy is an open source HTTP caching proxy software . A security vulnerability exists in the handling of HTTP Response X-Forwarded-For packet headers in versions of Squid Software Foundation Squid HTTP Caching Proxy prior to 4.0.23. An attacker could...

7.5CVSS6.6AI score0.13149EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2015/06/03 12:0 a.m.8 views

PT-2016-7112 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.0 Description: The issue is related to the mismanagement of locks during certain migrations in the performance subsystem of the Linux kernel. This allows local users to gain privileges via a crafted applicatio...

9.8CVSS7.5AI score0.37679EPSS
Exploits53References132
ATTACKERKB
ATTACKERKB
added 2013/08/23 4:55 p.m.3 views

CVE-2013-5587

Cross-site scripting XSS vulnerability in Request Tracker RT 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions...

4.3CVSS5.7AI score0.02069EPSS
Exploits0References7
Rows per page
Query Builder