Lucene search
+L

24343 matches found

Circl
Circl
added 2026/01/22 1:25 a.m.8 views

CVE-2025-27378

creationtimestamp| type| source ---|---|--- 2026-01-22 01:25:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxzpe5az52v 2026-01-22 04:24:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcydoyxvz32n...

9.8CVSS5.8AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.26 views

PT-2026-4071

Name of the Vulnerable Software and Affected Versions Arraytics Eventin versions through 4.1.1 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This could potentially allow an attacker to compromise the system. Recommendations...

5.4AI score0.00486EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.14 views

WordPress Plugin Event Tickets with Ticket Scanner: Code Injection Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9CVSS5.9AI score0.00331EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:00 a.m.9 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-37878)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37878 advisory. - In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARNON!ctx in freeevent f...

5.5CVSS5.5AI score0.00258EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.12 views

WordPress plugin Event Espresso 4 Decaf has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.20 views

PT-2026-4051

Name of the Vulnerable Software and Affected Versions Event Espresso versions through 5.0.37.decaf Description An authorization issue exists in Event Espresso 4 Decaf, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Event Espresso 4 Decaf to ...

5.3AI score0.00357EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:00 a.m.17 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-37884)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37884 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcutaskstrace...

5.5CVSS6.8AI score0.00198EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:00 a.m.9 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-56665)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56665 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid progarray access i...

5.5CVSS5.3AI score0.0022EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.18 views

PT-2026-4265

Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through = 4.2.8.0...

5.4AI score0.00189EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.15 views

WordPress plugin News Event code issue vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

9.9CVSS5.8AI score0.00501EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.13 views

PT-2026-3993

Name of the Vulnerable Software and Affected Versions blazethemes News Event versions through 1.0.1 Description An issue exists in blazethemes News Event news-event that allows for unrestricted file uploads with dangerous file types. The vulnerability allows attackers to upload malicious files,...

5.3AI score0.00501EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.19 views

PT-2026-4058

Name of the Vulnerable Software and Affected Versions Vollstart Event Tickets with Ticket Scanner versions through 2.8.3 Description A code injection issue exists in Vollstart Event Tickets with Ticket Scanner. The issue involves improper control of code generation, potentially allowing for code...

5.5AI score0.00331EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:00 a.m.8 views

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27067)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27067 advisory. - In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN when...

5.5CVSS6.6AI score0.00222EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:00 a.m.10 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-37810)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37810 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event coun...

7.8CVSS7AI score0.00216EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:00 a.m.14 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-37938)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37938 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have...

7.1CVSS5.5AI score0.00193EPSS
SaveExploits0References2
Circl
Circl
added 2026/01/21 9:19 p.m.5 views

GHSA-7QQ4-Q9R8-WC7W

creationtimestamp| type| source ---|---|--- 2026-01-21 21:19:37+00:00| seen| Telegram/UBFfKHG06E0U29GGUyxY4K-TiI8MYdEIgyx0Bfd0z-0...

4.8AI score
SaveExploits0
Circl
Circl
added 2026/01/21 9:18 p.m.8 views

CVE-2026-21929

creationtimestamp| type| source ---|---|--- 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...

5.3CVSS5.8AI score0.00278EPSS
SaveExploits0References1
Circl
Circl
added 2026/01/21 9:07 p.m.9 views

CVE-2025-69762

creationtimestamp| type| source ---|---|--- 2026-01-21 21:07:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxlb564ve2i...

9.8CVSS5AI score0.00836EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/21 6:16 p.m.13 views

CVE-2021-47861

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

8.5CVSS0.00132EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/21 6:16 p.m.13 views

CVE-2021-47857

Moodle 3.10.3 contains a persistent cross-site scripting vulnerability in the calendar event subtitle field that allows attackers to inject malicious scripts. Attackers can craft a calendar event with malicious JavaScript in the subtitle track label to execute arbitrary code when users view the...

7.2CVSS0.00321EPSS
SaveExploits1References3
Rows per page
Query Builder