2304 matches found
MGASA-2019-0079 Updated logback packages fix security vulnerability
It was found that logback is vulnerable to a deserialization issue. Logback can be configured to allow remote logging through SocketServer/ServerSocketReceiver interfaces that can accept untrusted serialized data. Authenticated attackers on the adjacent network can leverage this vulnerability to...
CVE-2018-19915
creationtimestamp| type| source ---|---|--- 2019-02-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46376...
CVE-2019-0662
creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...
CVE-2019-0637
creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...
MGASA-2019-0056 Updated ghostscript packages fix a security vulnerability
Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file. CVE-2019-6116...
CVE-2019-0561
creationtimestamp| type| source ---|---|--- 2019-01-09 14:53:48+00:00| seen| MISP/5c360a14-9018-4d13-b6c9-714c0a021402...
facebook.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-714979 Description| Value ---|--- Affected Website:| facebook.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...
LANGO Codeigniter Multilingual Script 1.0 Cross Site Scripting Vulnerability
LANGO Codeigniter Multilingual Script version 1.0 suffers from html injection and cross site scripting vulnerabilities. Exploit Title: LANGO - Codeigniter Multilingual Script 1.0 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: http://pokkho.com/lango/ Software Lin...
CVE-2018-9074
creationtimestamp| type| source ---|---|--- 2018-10-03 15:26:43+00:00| seen| MISP/5bb4df32-f218-45d9-aa7e-1dc00a021402...
CVE-2018-15421
creationtimestamp| type| source ---|---|--- 2018-09-21 22:27:28+00:00| seen| MISP/5ba56ff7-d494-42a5-a402-64760a021402...
CVE-2018-8288
creationtimestamp| type| source ---|---|--- 2018-08-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45213...
haysden.co.uk Improper Access Control vulnerability
Open Bug Bounty ID: OBB-635521 Description| Value ---|--- Affected Website:| haysden.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
CVE-2013-10054
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/librettouploadexec.rb 2025-08-04 21:47:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvm6akpydr2e 2025-10-23...
CVE-2016-6600
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/webnmsfileupload.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:49+00:00| seen|...
CVE-2017-2602
jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents SECURITY-358...
CVE-2018-0933
creationtimestamp| type| source ---|---|--- 2018-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44396...
andrewlermsider.com XSS vulnerability
Open Bug Bounty ID: OBB-584230 Description| Value ---|--- Affected Website:| andrewlermsider.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Solaris 10 (x86) : 150401-13
Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: CPU performance counters CPC drivers. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability c...