Lucene search
+L

3911 matches found

Cvelist
Cvelist
•added 2026/02/24 1:02 a.m.•59 views

CVE-2026-25798 ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

5.3CVSS0.0057EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/02/24 1:02 a.m.•15 views

CVE-2026-25798

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

7.5CVSS5.6AI score0.0057EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2026/02/24 12:00 a.m.•11 views

CVE-2026-25798

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted imag...

7.5CVSS5.9AI score0.0057EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•17 views

ImageMagick 代码问题漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It allows for reading, converting, and writing images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained code vulnerabilities. These vulnerabilities stemmed from...

7.5CVSS6.9AI score0.0057EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/02/23 3:34 p.m.•27 views

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

10CVSS6.8AI score0.00856EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2026/02/21 7:29 p.m.•13 views

CVE-2019-25445

Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft URLs with script tags in the keyword parameter of search-results.php to execute arbitrary JavaScript...

6.1CVSS5.6AI score0.00221EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/21 7:29 p.m.•13 views

CVE-2019-25444

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

9.1CVSS6AI score0.00387EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/20 7:23 p.m.•16 views

CVE-2019-25445

Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft URLs with script tags in the keyword parameter of search-results.php to execute arbitrary JavaScript...

6.1CVSS5.9AI score0.00221EPSS
SaveExploits1References2
OSV
OSV
•added 2026/02/20 7:23 p.m.•9 views

CVE-2019-25444

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

9.1CVSS5.9AI score0.00387EPSS
SaveExploits1References2
NVD
NVD
•added 2026/02/20 7:23 p.m.•18 views

CVE-2019-25444

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

9.1CVSS0.00387EPSS
SaveExploits1References2
NVD
NVD
•added 2026/02/20 7:23 p.m.•22 views

CVE-2019-25445

Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft URLs with script tags in the keyword parameter of search-results.php to execute arbitrary JavaScript...

6.1CVSS0.00221EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/02/20 6:18 p.m.•40 views

CVE-2019-25445 Fiverr Clone Script 1.2.2 Cross-Site Scripting via search-results.php

Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft URLs with script tags in the keyword parameter of search-results.php to execute arbitrary JavaScript...

6.1CVSS0.00221EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/02/20 6:18 p.m.•11 views

CVE-2019-25445 Fiverr Clone Script 1.2.2 Cross-Site Scripting via search-results.php

Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter. Attackers can craft URLs with script tags in the keyword parameter of search-results.php to execute arbitrary JavaScript...

6.1CVSS5.5AI score0.00221EPSS
SaveExploits1References2
CVE
CVE
•added 2026/02/20 6:18 p.m.•30 views

CVE-2019-25445

Fiverr Clone Script 1.2.2 contains a cross-site scripting (XSS) vulnerability in the keyword parameter of search-results.php. Unauthenticated attackers can craft URLs with script tags in the keyword parameter to execute arbitrary JavaScript in users’ browsers. CVSS data provided: CVSS v4.0 base s...

6.1CVSS5.6AI score0.00221EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2026/02/20 6:18 p.m.•27 views

CVE-2019-25444

CVE-2019-25444 : Fiverr Clone Script 1.2.2 is affected by an SQL injection in the page parameter that allows unauthenticated attackers to manipulate database queries, enabling extraction of sensitive data and potential data modification. The vulnerability stems from user-supplied SQL syntax in th...

9.1CVSS6AI score0.00387EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/02/20 6:18 p.m.•43 views

CVE-2019-25444 Fiverr Clone Script 1.2.2 SQL Injection via page Parameter

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

9.1CVSS0.00387EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/02/20 6:18 p.m.•9 views

CVE-2019-25444 Fiverr Clone Script 1.2.2 SQL Injection via page Parameter

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

9.1CVSS5.9AI score0.00387EPSS
SaveExploits1References2
Malwarebytes
Malwarebytes
•added 2026/02/20 10:00 a.m.•31 views

Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets

Attackers are running paid Facebook ads that look like official Microsoft promotions, then directing users to near-perfect clones of the Windows 11 download page. Click Download Now and instead of a Windows update, you get a malicious installer—one that silently steals saved passwords, browser...

5.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•1 views

CVE-2019-25444: Improper Neutralization of Special Elements used in an SQL Command

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

9.1CVSS5.8AI score0.00387EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•12 views

PT-2026-21283

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or...

8.8CVSS5.9AI score0.00387EPSS
SaveExploits1References3
Rows per page
Query Builder