Lucene search
K

13 matches found

Cvelist
Cvelist
added 2026/05/12 10:24 p.m.29 views

CVE-2026-43685

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5...

0.00305EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/15 2:59 p.m.0 views

CVE-2025-12141 Grafana Alerting Editors can edit destination of webhooks they did not create

In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that are granted as part of the fixed role "Contact Point Writer", which is part of the basic role Editor - can edit...

5.3CVSS5.8AI score0.00066EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-1905

Malware in sbrugna...

7.2CVSS7.1AI score0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-6510

Malware in sbrugna...

8.8CVSS8.6AI score0.00035EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-14603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test...

8.8CVSS7.8AI score0.00035EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.2 views

OverIT Geocall 代码问题漏洞

OverIT Geocall is a field service management solution from OverIT Italy. A code issue vulnerability exists in OverIT Geocall prior to version 8.0, which originates from an XXE vulnerability that can be exploited by an authenticated user with the Test Trasformazione XSL feature enabled to read...

6.5CVSS7.2AI score0.00349EPSS
Exploits1References4
Prion
Prion
added 2020/09/17 7:15 p.m.10 views

Command injection

In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This could lead to local escalation of privilege in the TEE, with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Andro...

7.2CVSS6.7AI score0.00013EPSS
Exploits0References1
OSV
OSV
added 2018/07/27 2:29 a.m.20 views

CVE-2018-14603

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test feature of the System Hooks component...

8.8CVSS6.5AI score
Exploits0References1
OSV
OSV
added 2018/07/27 2:29 a.m.0 views

UBUNTU-CVE-2018-14603

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test feature of the System Hooks component...

8.8CVSS7.3AI score0.00035EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2018/07/27 2:29 a.m.24 views

CVE-2018-14603

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test feature of the System Hooks component...

8.8CVSS7.2AI score0.00035EPSS
Exploits0References2
Prion
Prion
added 2018/07/27 2:29 a.m.17 views

Cross site request forgery (csrf)

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test feature of the System Hooks component...

6.8CVSS8.5AI score0.00035EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/07/27 2:0 a.m.58 views

CVE-2018-14603

CVE-2018-14603 affects GitLab Community and Enterprise Edition prior to 10.8.7, 11.0.x prior to 11.0.5, and 11.1.x prior to 11.1.2. The vulnerability is a CSRF in the System Hooks Test feature. Exploitation would require user interaction (per CVSSv3: UI=REQUIRED; no privileges needed) and could i...

8.8CVSS8.4AI score0.00035EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2018/07/27 2:0 a.m.25 views

CVE-2018-14603

Removed by vendor...

8.8CVSS7.3AI score0.00035EPSS
Exploits0
Rows per page
Query Builder