Lucene search
K

8 matches found

OSV
OSV
added 2026/05/06 10:22 p.m.0 views

GHSA-95Q8-X6R6-672M Lemmy may expose private community data through community, saved, liked, and modlog API views

NOTE: Only affects development version. Summary Lemmy applies private-community checks in PostView and CommentView, but several adjacent API views skip the accepted-follower filter. Bob, a registered user who is not an accepted follower, can read private community sidebar and summary fields. Alic...

5.3CVSS5.5AI score
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/03/05 7:51 a.m.2 views

CVE-2026-28775

An unauthenticated Remote Code Execution RCE vulnerability exists in the SNMP service of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the private SNMP community string with read/write access by default. Because the SNMP age...

10CVSS6.3AI score0.00944EPSS
Exploits1References1
NVD
NVD
added 2026/03/04 8:16 a.m.5 views

CVE-2026-28775

An unauthenticated Remote Code Execution RCE vulnerability exists in the SNMP service of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the private SNMP community string with read/write access by default. Because the SNMP age...

10CVSS0.00944EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/04 7:24 a.m.4 views

CVE-2026-28775

An unauthenticated Remote Code Execution RCE vulnerability exists in the SNMP service of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the private SNMP community string with read/write access by default. Because the SNMP age...

10CVSS6.3AI score0.00944EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.2 views

PT-2024-21674

Name of the Vulnerable Software and Affected Versions Toshiba printers affected versions not specified Description The issue allows attackers to remotely execute commands as root on Toshiba printers using SNMP and the private community. This can be combined with other vulnerabilities, making it...

9.8CVSS5.7AI score0.00196EPSS
Exploits1References8
Patchstack
Patchstack
added 2022/04/11 12:0 a.m.9 views

WordPress Wbcom Designs – Private Community for BuddyPress plugin <= 1.6.0 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability

Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress Wbcom Designs – Private Community for BuddyPress plugin versions = 1.6.0. Solution Update the WordPress Wbcom Designs – Private Community for BuddyPress plugin to the latest available...

4AI score
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.6 views

SNMP Private Community String (deprecated)

Binary data 1346.prm...

7.3AI score
Exploits0
securityvulns
securityvulns
added 2003/04/01 12:0 a.m.29 views

D-Link DSL unauthorized access

public and private community are accessable by default. public community leaks account infromation in cleartext...

2.8AI score
Exploits0References2
Rows per page
Query Builder