Lucene search
+L

1452 matches found

OSV
OSV
•added 2025/12/05 11:15 a.m.•17 views

AZL-71528 CVE-2025-66200 affecting package httpd for versions less than 2.4.66-1

moduserdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are...

5.4CVSS6.6AI score0.0065EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/05 11:15 a.m.•38 views

UBUNTU-CVE-2025-66200

moduserdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are...

5.4CVSS6.6AI score0.0065EPSS
SaveExploits0References5
OSV
OSV
•added 2025/12/05 11:02 a.m.•12 views

CVE-2025-66200 Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo

moduserdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are...

5.4CVSS7.2AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/05 12:00 a.m.•2 views

CVE-2025-66200: Authentication Bypass Using an Alternate Path or Channel

moduserdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are...

5.4CVSS6.1AI score0.0065EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/21 8:15 a.m.•19 views

CVE-2025-12894

The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This makes it possible for unauthenticated...

5.3CVSS0.00255EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/21 7:31 a.m.•8 views

CVE-2025-12894 Import WP – Export and Import CSV and XML files to WordPress <= 2.14.17 - Unauthenticated Information Exposure

The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This makes it possible for unauthenticated...

5.3CVSS5.8AI score0.00255EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/21 12:00 a.m.•20 views

PT-2025-47698

The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This makes it possible for unauthenticated...

5.3CVSS5.8AI score0.00255EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/21 12:00 a.m.•8 views

CVE-2025-12894: Files or Directories Accessible to External Parties

The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This makes it possible for unauthenticated...

5.3CVSS5.7AI score0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/21 12:00 a.m.•18 views

WordPress plugin Import WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An information disclosure vulnerability exists in WordPress Import WP plugin, which stems from a lack of .htaccess protection for the import and export functionality, which can ...

5.3CVSS6.1AI score0.00255EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2008-5599

Malware in sbrugna...

7.5CVSS7.3AI score0.07314EPSS
SaveExploits2References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2017-18008

Malware in sbrugna...

8.8CVSS8.7AI score0.01865EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2012-4329

Malware in sbrugna...

6.8CVSS6.2AI score0.03286EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-3755

Malware in sbrugna...

9.8CVSS9.5AI score0.08573EPSS
SaveExploits3References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2003-0013

Malware in sbrugna...

7.5CVSS6.1AI score0.02083EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2008-2950

Malware in sbrugna...

2.6CVSS6.1AI score0.01596EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2015-3394

Malware in sbrugna...

6.8CVSS6.4AI score0.00643EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2016-1753

Malware in sbrugna...

9.8CVSS8.2AI score0.03652EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-9612

Malware in sbrugna...

6.1CVSS6.3AI score0.014EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2017-17354

Malware in sbrugna...

8.8CVSS7.8AI score0.0128EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-13468

Malware in sbrugna...

6.5CVSS6.7AI score0.00718EPSS
SaveExploits0References2
Rows per page
Query Builder