Lucene search
+L

81 matches found

RedhatCVE
RedhatCVE
•added 2026/10/05 5:34 p.m.•8 views

CVE-2026-63268

A flaw was found in LibreOffice Calc. An attacker could craft a spreadsheet document with an external database link that points to local text files. If a user opens the malicious document, the application automatically reads the local file contents into the sheet, leading to unauthorized...

6.7CVSS5.8AI score0.00119EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/16 8:17 p.m.•30 views

CVE-2026-20242

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

9.8CVSS0.00639EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 8:08 p.m.•68 views

CVE-2026-20242

CVE-2026-20242 affects the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software . The root cause is insecure deserialization of a user-supplied Java byte stream. An unauthenticated, remote attacker who controls a host in the configured external database acces...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 8:08 p.m.•143 views

CVE-2026-20242 Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

9.8CVSS0.00639EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 8:08 p.m.•26 views

EUVD-2026-81109

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 8:08 p.m.•19 views

CVE-2026-20242 Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/09/16 4:00 p.m.•26 views

Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•7 views

CVE-2026-20242: Deserialization of Untrusted Data

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

9.8CVSS7.8AI score0.00639EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•7 views

PT-2026-93963

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center FMC Software affected versions not specified Description A flaw in the External Database Access feature allows an unauthenticated remote attacker to execute arbitrary commands with root privileges. The...

9.8CVSS6.5AI score0.00639EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/03/04 12:30 p.m.•27 views

EUVD-2026-9395

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the seraphaccelapi AJAX action with fn=GetData. This is due to the OnAdminApiGetData function not performing any capability checks. This makes it...

4.3CVSS5.9AI score0.0043EPSS
SaveExploits0References5
CNVD
CNVD
•added 2025/10/21 12:00 a.m.•34 views

WordPress External Login plugin SQL Injection Vulnerability

The WordPress External Login plugin is mainly used to integrate WordPress login functionality with an external database system, allowing users to log in to the site directly through an external account. WordPress External Login plugin is prone to SQL injection vulnerability, which is caused by...

7.5CVSS6AI score0.00396EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2012-4481

Malware in sbrugna...

6.8CVSS6.1AI score0.02086EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•39 views

EUVD-2002-0582

Malware in sbrugna...

7.5CVSS6.4AI score0.03215EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-6665

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00803EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2022-24272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongo...

6.5CVSS6.7AI score0.00925EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/05/22 5:55 a.m.•18 views

CVE-2012-4553

Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."...

6.8CVSS7.6AI score0.02086EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/15 8:47 p.m.•14 views

WordPress External Database Based Actions plugin <= 0.1 - Authenticated (Subscriber+) Authentication Bypass vulnerability

Authenticated Subscriber+ Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin External Database Based Actions versions = 0.1...

8.8CVSS7AI score0.00446EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/11/15 10:15 a.m.•40 views

CVE-2024-10311

The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.1. This is due to a missing capability check in the 'edbaadminhandle' function. This makes it possible for authenticated attackers, with subscriber-level permissions...

8.8CVSS0.00446EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/15 9:29 a.m.•67 views

CVE-2024-10311

CVE-2024-10311 : The External Database Based Actions WordPress plugin (versions

8.8CVSS7.7AI score0.00446EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/11/15 12:00 a.m.•25 views

WordPress External Database Based Actions Plugin <= 0.1 is vulnerable to Privilege Escalation

Software External Database Based Actions Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-10311 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID cd4901766574...

8.8CVSS6.8AI score0.00446EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder