Lucene search
+L

759 matches found

Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.6 views

PT-2025-43155

Name of the Vulnerable Software and Affected Versions jurajpuchky Fix Multiple Redirects versions through 1.2.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that malicious...

7.1CVSS6.3AI score0.0028EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.7 views

WordPress plugin fix-multiple-redirects 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS6AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/16 5:15 p.m.9 views

CVE-2025-61789

Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values...

6.5CVSS0.00338EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/16 5:15 p.m.9 views

DEBIAN-CVE-2025-61789

Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values...

6.5CVSS5.2AI score0.00338EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/16 5:15 p.m.8 views

UBUNTU-CVE-2025-61789

Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values...

6.5CVSS5.8AI score0.00338EPSS
SaveExploits0References5
CVE
CVE
added 2025/10/16 5:0 p.m.27 views

CVE-2025-61789

Icinga DB Web (before 1.1.4 and 1.2.3) allows an authorized user to use a custom variable in a filter that is protected or hidden to guess its values; versions 1.1.4 and 1.2.3 return an error when such a variable is used. Affected product: Icinga DB Web; root cause: filter-enumeration of hidden/p...

6.5CVSS6.4AI score0.00338EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.9 views

Icinga DB Web 安全漏洞

Icinga DB Web is an Icinga open source graphical interface to the Icinga DB database. A security vulnerability exists in Icinga DB Web versions prior to 1.1.4 and prior to 1.2.3, which originates from an authorized user being able to guess the value of a protected or hidden variable via a custom...

6.5CVSS6.3AI score0.00338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/16 12:0 a.m.5 views

PT-2025-42499

Name of the Vulnerable Software and Affected Versions Icinga DB Web versions prior to 1.1.4 Icinga DB Web versions prior to 1.2.3 Description Icinga DB Web offers a graphical interface for Icinga monitoring. An authorized user with access to Icinga DB Web can utilize a custom variable within a...

6.5CVSS6.5AI score0.00338EPSS
SaveExploits0References16
Vulnrichment
Vulnrichment
added 2025/10/15 8:25 a.m.4 views

CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS6AI score0.00333EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/15 8:25 a.m.8 views

CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...

8.8CVSS0.00333EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/15 8:25 a.m.22 views

CVE-2025-10293

The CVE-2025-10293 case concerns the WordPress Keyy Two Factor Authentication (like Clef) plugin. According to the provided sources, the vulnerability is a privilege-escalation flaw in versions up to 1.2.3 caused by improper validation of the user identity associated with a generated token. This ...

8.8CVSS6AI score0.00333EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2006-4412

Malware in sbrugna...

5.1CVSS6.4AI score0.07469EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-9152

Malware in sbrugna...

9.8CVSS9.5AI score0.0229EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-9183

Malware in sbrugna...

8.8CVSS8.8AI score0.0068EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-3954

Malware in sbrugna...

5CVSS6.1AI score0.02407EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2010-4866

Malware in sbrugna...

7.5CVSS6.4AI score0.01189EPSS
SaveExploits3References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-6509

Malware in sbrugna...

9.8CVSS9.5AI score0.03148EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2011-3766

Malware in sbrugna...

5CVSS6.4AI score0.01229EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-24804

Malware in sbrugna...

6.1CVSS6.3AI score0.00895EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2011-3938

Malware in sbrugna...

2.6CVSS6.4AI score0.00936EPSS
SaveExploits0References3
Rows per page
Query Builder