Lucene search
+L

286 matches found

Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.6 views

PT-2025-44298

Name of the Vulnerable Software and Affected Versions Jenkins Publish to Bitbucket Plugin versions 0.4 and earlier Description A cross-site request forgery CSRF flaw exists in the Jenkins Publish to Bitbucket Plugin. This issue allows attackers to connect to a URL specified by the attacker,...

5.4CVSS6.4AI score0.00188EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2006-1640

Malware in sbrugna...

5.1CVSS6.4AI score0.0155EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-2050

Malware in sbrugna...

7.8CVSS7.7AI score0.00308EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-7119

Malware in sbrugna...

8.8CVSS8.6AI score0.01641EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2010-2526

Malware in sbrugna...

2.1CVSS6.1AI score0.00337EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2005-4719

Malware in sbrugna...

5CVSS6.4AI score0.01377EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2006-0814

Malware in sbrugna...

6.4CVSS6.4AI score0.01596EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-3601

Malware in sbrugna...

9.8CVSS9.5AI score0.01529EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-16956

Malware in sbrugna...

5.5CVSS5.6AI score0.00296EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2007-3893

Malware in sbrugna...

7.5CVSS6.4AI score0.01355EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2004-1300

Malware in sbrugna...

10CVSS6.4AI score0.06201EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-4586

Malware in sbrugna...

7.5CVSS6.4AI score0.01145EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-10630

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00197EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/23 4:25 a.m.12 views

CVE-2025-7828 WP Filter & Combine RSS Feeds <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion

The WP Filter & Combine RSS Feeds plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the postlistingpage function in all versions up to, and including, 0.4. This makes it possible for authenticated attackers, with Contributor-level access...

4.3CVSS0.00188EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/23 4:25 a.m.22 views

CVE-2025-7828

CVE-2025-7828 affects the WordPress plugin WP Filter & Combine RSS Feeds (versions up to 0.4). Root cause: missing capability check in post_listing_page(), allowing authenticated attackers with Contributor-level access and above to delete feeds (unauthorized modification of data). Public details ...

4.3CVSS6.4AI score0.00188EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/23 4:25 a.m.4 views

CVE-2025-7828 WP Filter & Combine RSS Feeds <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion

The WP Filter & Combine RSS Feeds plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the postlistingpage function in all versions up to, and including, 0.4. This makes it possible for authenticated attackers, with Contributor-level access...

4.3CVSS6AI score0.00188EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/23 12:0 a.m.6 views

PT-2025-34510 · WordPress · Wp Filter & Combine Rss Feeds

Name of the Vulnerable Software and Affected Versions: WP Filter & Combine RSS Feeds plugin for WordPress versions up to and including 0.4 Description: The WP Filter & Combine RSS Feeds plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check...

4.3CVSS6.3AI score0.00188EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.6 views

CVE-2024-4356

The List categories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'categories' shortcode in all versions up to, and including, 0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6AI score0.00337EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:36 p.m.7 views

CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS7.2AI score0.00408EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:58 p.m.10 views

CVE-2021-36530

ngiflib 0.4 has a heap overflow in GetByteStr at ngiflib.c:108 in NGIFLIBNOFILE mode, GetByteStr copy memory buffer without checking the boundary...

8.8CVSS7.4AI score0.01064EPSS
SaveExploits1References1
Rows per page
Query Builder