Lucene search
K

12 matches found

Cvelist
Cvelist
added 2026/03/13 11:42 a.m.21 views

CVE-2026-32390 WordPress Nanosoft theme < 1.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in linethemes Nanosoft nanosoft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nanosoft: from n/a through 1.3.2...

5.4CVSS0.00053EPSS
Exploits0References1
CBLMariner
CBLMariner
added 2026/03/10 10:56 p.m.5 views

CVE-2026-3381 affecting package zlib for versions less than 1.3.2-1

CVE-2026-3381 affecting package zlib for versions less than 1.3.2-1. An upgraded version of the package is available that resolves this issue...

9.8CVSS5.7AI score0.00041EPSS
Exploits0
CBLMariner
CBLMariner
added 2026/03/10 10:56 p.m.1 views

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1. An upgraded version of the package is available that resolves this issue...

5.5CVSS5.7AI score0.00009EPSS
Exploits1
CBLMariner
CBLMariner
added 2026/03/09 2:32 p.m.2 views

CVE-2025-47911 affecting package terraform for versions less than 1.3.2-29

CVE-2025-47911 affecting package terraform for versions less than 1.3.2-29. A patched version of the package is available...

5.3CVSS5.8AI score0.00017EPSS
Exploits0
CBLMariner
CBLMariner
added 2025/10/22 3:7 p.m.8 views

CVE-2025-58058 affecting package terraform for versions less than 1.3.2-27

CVE-2025-58058 affecting package terraform for versions less than 1.3.2-27. A patched version of the package is available...

5.3CVSS6.9AI score0.00028EPSS
Exploits0
OSV
OSV
added 2025/10/09 10:15 p.m.1 views

GHSA-Q5R6-9QWQ-G2WJ Amazon.IonDotnet is vulnerable to Denial of Service attacks

Summary Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will no...

8.7CVSS7AI score0.00119EPSS
Exploits0References7
NVD
NVD
added 2025/10/09 6:15 p.m.2 views

CVE-2025-11573

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

8.7CVSS0.00119EPSS
Exploits0References3
CVE
CVE
added 2025/10/09 5:48 p.m.8 views

CVE-2025-11573

CVE-2025-11573 affects Amazon.IonDotnet library. Versions earlier than 1.3.2 are vulnerable to an infinite loop triggered by specially crafted text input, leading to denial of service. Remediation is to upgrade to 1.3.2 or higher; the library has been deprecated as of 2025-08-20 and will not rece...

8.7CVSS6.4AI score0.00119EPSS
Exploits0References3
NVD
NVD
added 2025/08/13 9:15 p.m.2 views

CVE-2011-10017

Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...

10CVSS0.63506EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/07/11 9:47 a.m.2 views

WordPress VikRentCar Car Rental Management System plugin < 1.3.2 - Cross Site Request Forgery vulnerability

Cross Site Request Forgery vulnerability discovered by Srikar V in WordPress Plugin VikRentCar versions 1.3.2...

8.8CVSS7AI score0.00263EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2023/12/18 4:15 p.m.1 views

AZL-32229 CVE-2023-48795 affecting package terraform for versions less than 1.3.2-25

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...

5.9CVSS6.7AI score0.54214EPSS
Exploits3References1
OSV
OSV
added 2022/08/29 3:15 p.m.3 views

AZL-10863 CVE-2022-1117 affecting package fapolicyd for versions less than 1.3.2-1

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

8.4CVSS5.7AI score0.00152EPSS
Exploits0References1
Rows per page
Query Builder