Lucene search
K

16 matches found

EUVD
EUVD
added 2026/05/21 7:34 a.m.5 views

EUVD-2026-31232

Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or impersonate a user via cryptanalytic attack...

7.4CVSS5.8AI score0.00021EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.4 views

PT-2026-42421

Name of the Vulnerable Software and Affected Versions Netatalk versions 2.0.0 through 4.4.2 Description An off-by-two error in the lp write function within papd allows an adjacent network attacker to modify limited data or cause a minor service disruption by sending crafted print data...

4.2CVSS5.8AI score0.00018EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/07 11:53 a.m.2 views

CVE-2026-42285

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending a specially crafted BGP UPDATE message. When the server receives a message with inconsistent...

7.5CVSS5.8AI score0.00177EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2026/05/07 12:0 a.m.2 views

CVE-2026-42285

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending a specially crafted BGP UPDATE message. When the server receives a message with inconsistent...

7.5CVSS5.8AI score0.00177EPSS
Exploits1References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в libpgjava

pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or PreparedStatemet.setByteaint, InputStream will create a temporary file if the InputStream is larger than 2k. This will create a temporary file which...

5.5CVSS6.3AI score0.00082EPSS
Exploits1References1
Patchstack
Patchstack
added 2026/02/02 8:27 a.m.2 views

WordPress Community by PeepSo plugin <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Tieu Pham Trong Nhan - TechlabCorp in WordPress Plugin Community by PeepSo versions = 6.4.5.0...

4.8CVSS5.3AI score0.00323EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/26 12:0 a.m.24 views

CVE-2025-70982

Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data...

0.00066EPSS
Exploits1References3
Circl
Circl
added 2025/04/23 2:5 p.m.0 views

CVE-2022-45008

creationtimestamp| type| source ---|---|--- 2025-04-23 14:05:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13034...

4.8CVSS4.9AI score0.00257EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.1 views

ETIC Telecom Remote Access Server 安全漏洞

ETIC Telecom Remote Access Server is a remote maintenance solution from the French company ETIC Telecom. It is designed to enable manufacturers to maintain automated equipment remotely. A security vulnerability exists in ETIC Telecom Remote Access Server versions prior to 4.5.0, which stems from...

8.6CVSS6.5AI score0.00051EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/06 12:0 a.m.1 views

WordPress plugin GEO my WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.2AI score0.0028EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/03 12:0 a.m.1 views

CBOR Security Breach

CBOR is a C implementation of the Concise Binary Object Representation by the individual developer Peter Occil. A security vulnerability exists in CBOR versions 4.0.0 through 4.5.0, which stems from the use of an inefficient algorithm that makes it susceptible to denial-of-service attacks when...

7.5CVSS6.7AI score0.0047EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2023/11/30 5:15 a.m.2 views

CVE-2023-47464

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function...

8.8CVSS7.7AI score0.70103EPSS
Exploits2References2
OSV
OSV
added 2023/11/30 5:15 a.m.0 views

CVE-2023-47463

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the glnassys authentication function...

9.8CVSS6.1AI score
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2023/06/19 7:0 a.m.2 views

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.

...

8.8CVSS7.1AI score0.00236EPSS
Exploits1
CNNVD
CNNVD
added 2021/09/29 12:0 a.m.2 views

Ibm Sterling Order Management 跨站脚本漏洞

IBM Sterling Order Management is an order management system that allows companies to seamlessly synchronize and manage the entire lifecycle of orders.A cross-site scripting vulnerability exists in IBM Sterling Order Management versions 9.4, 9.5, and 10.0. An attacker could exploit the vulnerabili...

6.1CVSS6.2AI score0.00151EPSS
Exploits0References4
CNVD
CNVD
added 2016/03/10 12:0 a.m.1 views

Adobe Digital Editions Denial of Service Vulnerability

Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. Adobe DE 4.5.0 and previous versions of security vulnerabilities exist. An attacker could exploit this vulnerabilit...

10CVSS7.7AI score0.3366EPSS
Exploits3References1
Rows per page
Query Builder