Lucene search
+L

8699 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-12399

Malicious code in bioql PyPI...

4.9CVSS6.3AI score0.00279EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2024-49705

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00324EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2025-8214

Malicious code in bioql PyPI...

6.6CVSS6.6AI score0.00211EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.17 views

EUVD-2025-31697

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00601EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2025-10797

Malicious code in bioql PyPI...

6.4CVSS7.2AI score0.00339EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.20 views

EUVD-2024-17311

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.01147EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2022-51267

Malicious code in bioql PyPI...

7.5CVSS6.3AI score0.01094EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/03 3:36 p.m.38 views

CVE-2025-34226

OpenPLC Runtime v3 is affected by an input validation flaw in the /upload-program-action endpoint: the epoch_time parameter submitted during program uploads is not validated, allowing corruption of the programs database. After a malformed upload, the runtime can operate, but on restart the databa...

7.1CVSS6.5AI score0.00663EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/03 2:15 p.m.11 views

CVE-2025-60450

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\editor\Uploader.class.php component. This security flaw allows attackers to...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/03 2:15 p.m.13 views

CVE-2025-60448

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...

6.1CVSS0.00228EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/03 2:15 p.m.14 views

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/03 2:15 p.m.16 views

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

6.1CVSS0.00228EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/03 2:15 p.m.14 views

CVE-2025-60453

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the column management module, specifically in the app\system\column\admin\index.class.php component. The vulnerability allows attackers to upload malicious SVG files...

6.1CVSS0.00261EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/03 12:15 p.m.24 views

CVE-2025-9561

The AP Background plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization and insufficient file validation within the advParallaxBackAdminSaveSlider handler in versions 3.8.1 to 3.8.2. This makes it possible for authenticated attackers, with Subscriber-level acce...

8.8CVSS0.00631EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/03 12:15 p.m.13 views

CVE-2025-9212

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

7.5CVSS0.00511EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 11:17 a.m.9 views

EUVD-2025-32247

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

7.5CVSS7.2AI score0.00511EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/03 12:00 a.m.16 views

MetInfo CMS 安全漏洞

MetInfo CMS is a content management system from China's Mito MetInfo. A security vulnerability exists in MetInfo CMS version 8.0, which stems from insufficient validation and cleanup of SVG file uploads and could lead to a stored cross-site scripting attack...

6.1CVSS5.9AI score0.00228EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/03 12:00 a.m.6 views

CVE-2025-60450

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\editor\Uploader.class.php component. This security flaw allows attackers to...

5.7AI score0.00228EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/10/03 12:00 a.m.14 views

PT-2025-40605

Name of the Vulnerable Software and Affected Versions KUNO CMS versions prior to 1.3.14 Description KUNO CMS, a full-stack blog application, has flaws in its file upload functionality. The upload process only validates file types based on Content-Type headers and does not analyze file content or...

5.4CVSS6.8AI score0.00245EPSS
SaveExploits0References9
CVE
CVE
added 2025/10/03 12:00 a.m.19 views

CVE-2025-60448

CVE-2025-60448 affects Emlog Pro 2.5.19; stored XSS via SVG uploads in /admin/media.php due to insufficient validation. Exploitation could occur when malicious SVGs are viewed. Affected component is the SVG upload handler; no fix version is stated in the sources. PT Security notes no information ...

6.1CVSS5.7AI score0.00228EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder