Lucene search
K

53 matches found

Vulnrichment
Vulnrichment
added 2026/05/27 7:47 p.m.7 views

CVE-2026-8360 Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS

Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface in various DLLs i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll can return a NULL pointer i.e., when no user is logged into the Triofox Server Agent Management Console. The returned NULL pointer is not checked before being...

7.5CVSS5.8AI score0.00053EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:32 a.m.4 views

CVE-2019-16967

An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14.0.10.3. In the Manager module form html\admin\modules\manager\views\form.php, an unsanitized managerdisplay variable coming from the URL is reflected in HTML, leading to XSS. It can be requested via G...

6.1CVSS6.8AI score0.00333EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-18340

Malware in sbrugna...

4.4CVSS5.9AI score0.00019EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-7021

Malware in sbrugna...

6.8CVSS6.4AI score0.03935EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7444

Malware in sbrugna...

6.1CVSS6.3AI score0.00333EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-16244

Malicious code in bioql PyPI...

5.1CVSS4.8AI score0.00135EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2020-14365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf...

7.1CVSS7.3AI score0.0007EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/27 6:31 p.m.12 views

CVE-2025-5153

A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some unknown processing of the component Design Manager Module. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The...

5.1CVSS6.1AI score0.00135EPSS
Exploits1References1
OSV
OSV
added 2025/05/25 6:15 p.m.2 views

CVE-2025-5153

A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some unknown processing of the component Design Manager Module. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The...

4.8CVSS3.7AI score0.00135EPSS
Exploits1References4
NVD
NVD
added 2025/05/25 6:15 p.m.11 views

CVE-2025-5153

A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some unknown processing of the component Design Manager Module. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The...

5.1CVSS0.00135EPSS
Exploits1References4
CVE
CVE
added 2025/05/25 5:31 p.m.78 views

CVE-2025-5153

CMS Made Simple 2.2.21 is affected by a cross-site scripting vulnerability in the Design Manager Module, caused by improper handling of the Description argument. Exploitation is possible remotely and details have been disclosed publicly. No patch/version fix is provided in the documents; several ...

5.1CVSS3.7AI score0.00135EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/05/25 5:31 p.m.16 views

CVE-2025-5153 CMS Made Simple Design Manager Module cross site scripting

A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some unknown processing of the component Design Manager Module. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The...

5.1CVSS0.00135EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/05/25 5:31 p.m.6 views

CVE-2025-5153 CMS Made Simple Design Manager Module cross site scripting

A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some unknown processing of the component Design Manager Module. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.6AI score0.00135EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/05/25 12:0 a.m.2 views

PT-2025-22865 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.21 Description: A problematic issue has been found in the Design Manager Module of CMS Made Simple, affecting some unknown processing. The manipulation of the Description argument leads to cross-site scripting. Thi...

5.1CVSS3.5AI score0.00135EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/05/25 12:0 a.m.1 views

CMS Made Simple(CMSMS) 代码注入漏洞

CMS Made Simple CMSMS is an open source content management system CMS from Cmsms team. The system supports role-based permission management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A code injection vulnerability exists in CMS Made Simple...

5.1CVSS4.9AI score0.00135EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 8:9 a.m.5 views

CVE-2024-27625

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting XSS. This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field...

4.8CVSS6.4AI score0.00128EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:57 p.m.4 views

CVE-2009-3350

Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors...

10CVSS7.3AI score0.00345EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:34 a.m.6 views

CVE-2024-55921

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

8.8CVSS8AI score0.02894EPSS
Exploits0References1
NVD
NVD
added 2025/01/14 8:15 p.m.12 views

CVE-2024-55921

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

8.8CVSS0.02894EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/14 7:36 p.m.18 views

CVE-2024-55921 Cross-Site Request Forgery in Extension Manager Module in TYPO3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

7.5CVSS0.02894EPSS
Exploits0References2
Rows per page
Query Builder