Lucene search
K

20 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-30679

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00064EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.2 views

CVE-2025-57922

Insertion of Sensitive Information Into Sent Data vulnerability in Coordinadora Mercantil S.A. Envíos Coordinadora Woocommerce coordinadora allows Retrieve Embedded Sensitive Data.This issue affects Envíos Coordinadora Woocommerce: from n/a through = 1.1.32...

5.3CVSS5.9AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2025/09/22 7:15 p.m.2 views

CVE-2025-57922

Insertion of Sensitive Information Into Sent Data vulnerability in Coordinadora Mercantil S.A. Envíos Coordinadora Woocommerce coordinadora allows Retrieve Embedded Sensitive Data.This issue affects Envíos Coordinadora Woocommerce: from n/a through = 1.1.32...

5.3CVSS0.00064EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.1 views

CVE-2025-57922 WordPress Envíos Coordinadora Woocommerce Plugin <= 1.1.31 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Coordinadora Mercantil S.A. Envíos Coordinadora Woocommerce allows Retrieve Embedded Sensitive Data. This issue affects Envíos Coordinadora Woocommerce: from n/a through 1.1.31...

5.3CVSS6.5AI score0.00064EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.7 views

CVE-2025-57922 WordPress Envíos Coordinadora Woocommerce plugin <= 1.1.32 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Coordinadora Mercantil S.A. Envíos Coordinadora Woocommerce coordinadora allows Retrieve Embedded Sensitive Data.This issue affects Envíos Coordinadora Woocommerce: from n/a through = 1.1.32...

5.3CVSS0.00064EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.6 views

CVE-2025-57922

CVE-2025-57922 concerns Envíos Coordinadora Woocommerce (Coordinadora) before version 1.1.31: Insertion of Sensitive Information Into Sent Data vulnerability that can lead to leakage of embedded sensitive data when data is transmitted. Affected product: Envíos Coordinadora Woocommerce (WordPress ...

5.3CVSS5.9AI score0.00064EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-38773

Insertion of Sensitive Information Into Sent Data vulnerability in Coordinadora Mercantil S.A. Envíos Coordinadora Woocommerce allows Retrieve Embedded Sensitive Data. This issue affects Envíos Coordinadora Woocommerce: from n/a through 1.1.31...

5.3CVSS6.9AI score0.00064EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.1 views

WordPress plugin Envíos Coordinadora Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.3AI score0.00064EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/22 12:0 a.m.2 views

ViewVC 路径遍历漏洞

ViewVC is ViewVC open source a Web-based CVS, SVN code repository browsing tool. A path traversal vulnerability exists in ViewVC versions 1.1.0 to 1.1.31 and 1.2.0 to 1.2.3, which stems from a directory traversal in the standalone.py script, which could lead to the disclosure of the contents of t...

7.5CVSS6.4AI score0.00796EPSS
Exploits1References6
OSV
OSV
added 2025/04/11 2:5 p.m.5 views

GHSA-7R2V-8WXR-3CH5 Yii does not prevent XSS in scenarios where fallback error renderer is used

Impact Affected versions of yiisoft/yii are vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Patches Upgrade yiisoft/yii to version 1.1.31 or higher. References - Git commit If you have any questions or comments about this advisory, contact us through...

6.1CVSS6.1AI score0.00338EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/04/10 2:32 p.m.9 views

CVE-2025-32027 Yii does not prevent XSS in scenarios where fallback error renderer is used

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher...

6.1CVSS6.1AI score0.00338EPSS
Exploits0References2
OSV
OSV
added 2025/04/10 2:32 p.m.7 views

CVE-2025-32027 Yii does not prevent XSS in scenarios where fallback error renderer is used

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher...

6.1CVSS6.2AI score0.00338EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/04/10 12:0 a.m.3 views

Yii 安全漏洞

Yii is a component-based, high-performance PHP framework for developing large-scale web applications developed by the YII team. A security vulnerability exists in Yii versions prior to 1.1.31, which stems from reflective cross-site scripting...

6.1CVSS6.1AI score0.00338EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:27 a.m.1 views

SUSE CVE-2018-10897

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path...

7.8CVSS9.5AI score0.02619EPSS
Exploits0References3
Veracode
Veracode
added 2019/01/15 9:25 a.m.14 views

Directory Traversal

redhat-virtualization-host is vulnerable to directory traversal attacks. The vulnerability exists as a directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they...

8.1CVSS7.7AI score0.02619EPSS
Exploits0References12Affected Software4
UbuntuCve
UbuntuCve
added 2018/08/01 5:29 p.m.20 views

CVE-2018-10897

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path...

9.3CVSS7.1AI score0.02619EPSS
Exploits0References2
NVD
NVD
added 2018/08/01 5:29 p.m.11 views

CVE-2018-10897

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path...

9.3CVSS7.9AI score0.02619EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2015/03/26 12:0 a.m.9 views

Debian DLA-92-1 : tomcat-native security followup update

This is an upgrade from tomcat-native 1.1.20 the version previously available in squeeze to 1.1.31, the full list of changes between these versions can be seen in the upstream changelog, which is available online at http://tomcat.apache.org/native-doc/miscellaneous/changelog.html This update itse...

5.5AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2005/02/07 12:0 a.m.10 views

RaidenHTTPd < 1.1.31 Crafted Request Remote File Access

Binary data 2594.prm...

7.3AI score
Exploits0
Packet Storm
Packet Storm
added 2005/02/06 12:0 a.m.25 views

RaidenHTTPD.txt

Donato Ferrante Application: RaidenHTTPD http://www.raidenhttpd.com/ Version: 1.1.27 Bug: directory traversal Date: 05-Feb-2005 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Descripti...

7.4AI score
Exploits0
Rows per page
Query Builder