Lucene search
+L

930 matches found

OSV
OSV
•added 2025/05/07 3:55 a.m.•8 views

MAL-2025-3686 Malicious code in glance-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee4efe6d4c135136464de1f7b7b933c547869de8b71b6f645fedf3afbe4f5356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/04/15 12:00 a.m.•8 views

RHEL 7 : openstack-glance (RHSA-2016:0309)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0309 advisory. OpenStack Image Service glance provides discovery, registration, and delivery services for disk and server images. The service provides the ability t...

4.3CVSS5.2AI score0.01478EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/04/15 12:00 a.m.•14 views

RHEL 6 : openstack-glance (RHSA-2013:1525)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1525 advisory. The openstack-glance packages provide a service code name Glance that acts as a registry for virtual machine images. A flaw was found in the Glance...

3.5CVSS5.5AI score0.03082EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/04/15 12:00 a.m.•21 views

RHEL 6 : openstack-glance (RHSA-2013:0209)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0209 advisory. These packages provide a service code name Glance that acts as a registry for virtual machine images. It was found that when the OpenStack Glance...

4CVSS5.5AI score0.02989EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2024-1141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...

5.5CVSS5.8AI score0.00226EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2017-7200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An SSRF issue was discovered in OpenStack Glance before Newton. The 'copyfrom' feature in the Image Service API v1 allowed an attacker to perform masked network...

5.8CVSS6.1AI score0.02057EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2016-8611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 /images API POST method for authenticat...

6.5CVSS6.2AI score0.02297EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/15 2:23 p.m.•13 views

CVE-2025-26570

Cross-Site Request Forgery CSRF vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affects Glance That: from n/a through 4.9...

7.1CVSS7.3AI score0.00134EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/02/13 2:16 p.m.•18 views

CVE-2025-26570

Cross-Site Request Forgery CSRF vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affects Glance That: from n/a through 4.9...

7.1CVSS7.3AI score0.00134EPSS
SaveExploits0References3
NVD
NVD
•added 2025/02/13 2:16 p.m.•40 views

CVE-2025-26570

Cross-Site Request Forgery CSRF vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affects Glance That: from n/a through 4.9...

7.1CVSS0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/13 1:53 p.m.•73 views

CVE-2025-26570

CVE-2025-26570 is a CSRF to Stored XSS vulnerability affecting WordPress Glance That plugin, versioned up to 4.9. The provided metrics indicate a CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, low attack complexity, no privileges required, and user interaction required, and scope ...

7.1CVSS7.3AI score0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/13 1:53 p.m.•41 views

CVE-2025-26570 WordPress Glance That plugin <= 4.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affects Glance That: from n/a through 4.9...

7.1CVSS0.00134EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/13 1:53 p.m.•6 views

CVE-2025-26570 WordPress Glance That plugin <= 4.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affects Glance That: from n/a through 4.9...

7.1CVSS7.3AI score0.00134EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/13 12:47 p.m.•18 views

WordPress Glance That plugin <= 4.9 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Glance That versions = 4.9...

7.1CVSS6.2AI score0.00134EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/02/13 12:00 a.m.•12 views

WordPress plugin Glance That 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8.3AI score0.00134EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/13 12:00 a.m.•29 views

PT-2025-7194

Name of the Vulnerable Software and Affected Versions: Glance That versions n/a through 4.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS7.3AI score0.00134EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•3 views

CVE-2025-26570: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affects Glance That: from n/a through 4.9...

7.1CVSS5.8AI score0.00134EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/27 12:00 a.m.•3 views

CVE-2025-23792: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Busters Passwordless WP – Login with your glance or fingerprint passwordless-wp allows Reflected XSS.This issue affects Passwordless WP – Login with your glance or fingerprint: from n/a through ...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/20 7:34 a.m.•7 views

MAL-2025-192 Malicious code in glance-android-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f082498ee8cee22569a9d952f86e51b833f15f9ddf0ae457b87367e28bcf198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/20 7:34 a.m.•15 views

Malicious code in glance-android-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f082498ee8cee22569a9d952f86e51b833f15f9ddf0ae457b87367e28bcf198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder