Lucene search
K

868 matches found

Openbugbounty
Openbugbounty
added 2022/01/17 8:34 a.m.15 views

dates-md.de Cross Site Scripting vulnerability OBB-2337745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Circl
Circl
added 2022/01/14 12:23 a.m.23 views

CVE-2021-34993

creationtimestamp| type| source ---|---|--- 2022-01-14 00:23:58+00:00| seen| https://t.me/cibsecurity/35462 2025-01-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-15 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26...

9.8CVSS8.4AI score0.05424EPSS
In wildExploits0References1
Circl
Circl
added 2022/01/05 12:37 p.m.13 views

CVE-2012-0151

creationtimestamp| type| source ---|---|--- 2022-01-05 12:37:10+00:00| seen| MISP/a8009d56-7dab-4b65-a6ee-3caf2773c960 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 17:18:47+00:00| seen| https://t.me/arpsyndicate/987 2024-12-24 20:32:10+00:00| seen|...

9.3CVSS5.4AI score0.8878EPSS
Exploits1References3
Circl
Circl
added 2022/01/03 12:38 p.m.3 views

CVE-2021-30351

creationtimestamp| type| source ---|---|--- 2022-01-03 12:38:19+00:00| seen| https://t.me/cibsecurity/34842 2022-04-21 13:12:06+00:00| published-proof-of-concept| https://t.me/cKure/9397 2022-04-21 15:39:41+00:00| seen| https://t.me/AnonymousHackersnomo/174 2022-04-22 11:53:08+00:00| seen|...

9.8CVSS7.5AI score0.04018EPSS
Exploits0References6
OSV
OSV
added 2021/11/29 9:15 a.m.2 views

CVE-2021-24842

The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1 list private post titles of other users and 2 change the posted date of other users' posts...

5.4CVSS5.8AI score
Exploits0References2
CNNVD
CNNVD
added 2021/11/29 12:0 a.m.4 views

WordPress plugin Bulk Datetime Change 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. An authorization issue vulnerability exists in the WordPress Bulk Datetime Change plugin, which stems from a...

5.5CVSS5.7AI score0.00699EPSS
Exploits2References3
Circl
Circl
added 2021/11/13 12:39 a.m.45 views

CVE-2021-3577

creationtimestamp| type| source ---|---|--- 2021-11-13 00:39:34+00:00| seen| https://t.me/cibsecurity/32346 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-3577.yaml 2024-12-24 00:00:00+00:00| seen| The Shadowserver...

8.8CVSS8AI score0.59893EPSS
In wildExploits0References2
RedHat Linux
RedHat Linux
added 2021/11/11 6:30 p.m.3 views

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.05284EPSS
Exploits0References4
ThreatPost
ThreatPost
added 2021/11/09 2:43 p.m.17 views

Robinhood Trading Platform Data Breach Hits 7M Customers

Investor trading app company Robinhood Markets has confirmed a data breach that affects the personal information of about 7 million customers – roughly a third of its user base. A cyberattacker made off with emails and more, which could lead to follow-on attacks for Robinhood customers. The tradi...

7.2AI score
Exploits0References6
CNNVD
CNNVD
added 2021/11/05 12:0 a.m.2 views

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System 4.0 has a security vulnerability that can be exploited by an attacker to conduct xss attacks using multiple parameters. The parameters that can be exploited are 1...

6.1CVSS6.3AI score0.0089EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/11/05 12:0 a.m.3 views

PT-2021-22580 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in the system. The issue is related to the searchdata parameter in "/doctor/search.php" and "/admin/patient-search.php" API...

6.1CVSS6.1AI score0.0089EPSS
Exploits0References3
Circl
Circl
added 2021/10/29 4:0 a.m.6 views

CVE-2021-38000

creationtimestamp| type| source ---|---|--- 2021-10-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=682 2021-10-29 06:14:24+00:00| exploited| https://t.me/cKure/7810 2021-10-29 16:50:00+00:00| exploited| https://t.me/truesecator/2268 2021-10-30 15:46:49+00:00| seen|...

6.1CVSS7.9AI score0.04485EPSS
Exploits1References16
RedHat Linux
RedHat Linux
added 2021/10/25 12:24 p.m.3 views

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.05284EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/10/25 12:24 p.m.6 views

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.05284EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 2:40 p.m.3 views

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.05284EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 1:49 p.m.3 views

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.05284EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 1:36 p.m.4 views

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.05284EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 1:12 p.m.1 views

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.05284EPSS
Exploits0References4
Ubuntu
Ubuntu
added 2021/10/18 11:7 a.m.133 views

USN-5109-1: nginx vulnerability

It was discovered that nginx incorrectly handled files with certain modification dates. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact...

9.8CVSS8.2AI score0.03258EPSS
Exploits1
OSV
OSV
added 2021/10/18 11:7 a.m.2 views

USN-5109-1 nginx vulnerability

It was discovered that nginx incorrectly handled files with certain modification dates. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact...

9.8CVSS7.3AI score0.03258EPSS
Exploits1References2
Rows per page
Query Builder