Lucene search
+L

264 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-1058

Malware in sbrugna...

7.5CVSS6.4AI score0.0159EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2006-0866

Malware in sbrugna...

5CVSS6.4AI score0.0162EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2008-0461

Malware in sbrugna...

7.5CVSS6.4AI score0.01036EPSS
SaveExploits1References6
Patchstack
Patchstack
added 2025/09/26 10:05 a.m.13 views

WordPress Silencesoft RSS Reader Plugin <= 0.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Silencesoft RSS Reader versions = 0.6...

6.2AI score0.00226EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.11 views

WordPress plugin Silencesoft RSS Reader 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

5.4CVSS6.8AI score0.00171EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/25 10:10 a.m.24 views

CVE-2025-48303

CVE-2025-48303 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Post Type Converter (versions up to 0.6). The entry lists a CVSS v3.1 base score of 4.3 (Medium) with vectors: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. Connected sources corroborate the CSRF flaw and no...

4.3CVSS5.9AI score0.00124EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/25 10:10 a.m.16 views

CVE-2025-48303 WordPress Post Type Converter plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Kevin Langley Jr. Post Type Converter post-type-converter allows Cross Site Request Forgery.This issue affects Post Type Converter: from n/a through = 0.6...

4.3CVSS0.00124EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/25 12:00 a.m.11 views

wordpress plugin Post Type Converter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. wordpress plugin is an application plugin. A cross-site request forge...

4.3CVSS6.4AI score0.00124EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/08/22 10:14 p.m.10 views

WordPress Silencesoft RSS Reader plugin <= 0.6 - Cross-Site Request Forgery to RSS Feed Deletion vulnerability

Cross-Site Request Forgery to RSS Feed Deletion vulnerability discovered by Nabil Irawan in WordPress Plugin Silencesoft RSS Reader versions = 0.6...

4.3CVSS6.7AI score0.00133EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/06/26 12:00 a.m.9 views

yubiserver 安全漏洞

yubiserver is a one-time password authentication server from the yubiserver open source. A security vulnerability exists in yubiserver versions prior to 0.6, which stems from an improper use of sprintf resulting in a buffer overflow...

9.8CVSS7AI score0.0039EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 11:34 a.m.11 views

CVE-2025-22574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cleanshooter ICS Button ics-button allows Stored XSS.This issue affects ICS Button: from n/a through = 0.6...

6.5CVSS7.2AI score0.00273EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:28 a.m.9 views

CVE-2024-5997

The Duplica – Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the duplicateuser and duplicatepost functions in all versions up to, and including, 0.6. This makes it possible for authenticate...

4.3CVSS6.5AI score0.00362EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:44 p.m.12 views

CVE-2022-45395

Jenkins CCCC Plugin 0.6 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

9.8CVSS6.7AI score0.01086EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:29 p.m.12 views

CVE-2020-20665

rudp v0.6 was discovered to contain a memory leak in the component main.c...

7.5CVSS7.3AI score0.0114EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 12:14 p.m.13 views

CVE-2012-1604

Cross-site scripting XSS vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML via the do parameter to index.php...

4.3CVSS5.9AI score0.02049EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2025/05/19 6:45 p.m.18 views

CVE-2025-43832 WordPress Remote Images Grabber plugin <= 0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andreyk Remote Images Grabber remote-images-grabber allows Reflected XSS.This issue affects Remote Images Grabber: from n/a through = 0.6...

7.1CVSS0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/05 12:00 a.m.8 views

Shiro-Action 安全漏洞

Shiro-Action is a Shiro-based permission management system by zhao jun individual developer. A security vulnerability exists in Shiro-Action v0.6, which stems from improper access control of the component /user/list, which could lead to access to sensitive information...

7.5CVSS6.5AI score0.00363EPSS
SaveExploits1References1
CVE
CVE
added 2025/03/11 9:00 p.m.52 views

CVE-2025-28902

CVE-2025-28902 is a CSRF vulnerability in the WordPress plugin Contact Form 7 Select Box Editor Button , affecting versions up to 0.6. The connected details confirm a cross-site request forgery flaw in this plugin; no exploitation details or patch/remediation are provided in the sources. The entr...

4.3CVSS7.2AI score0.00165EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/24 3:14 p.m.12 views

WordPress Get Posts plugin <= 0.6 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Get Posts versions = 0.6...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/02/24 2:49 p.m.67 views

CVE-2025-27349

CVE-2025-27349 refers to a cross-site scripting (XSS) vulnerability in the WordPress plugin Get Posts . The issue arises from improper input neutralization during web page generation, enabling a Stored XSS condition for affected versions. The vulnerability scope is described as Get Posts: from n/...

6.5CVSS7.2AI score0.00216EPSS
SaveExploits0References1
Rows per page
Query Builder