Lucene search
+L

1066 matches found

Vulnrichment
Vulnrichment
added 2026/03/13 11:41 a.m.2 views

CVE-2026-32340 WordPress Business One Page theme <= 1.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.3CVSS5.8AI score0.00224EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.9 views

WordPress plugin MAS Videos 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

5.3CVSS5.8AI score0.00224EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.8 views

PT-2026-25236

CVE-2026-32390 Missing Authorization vulnerability in linethemes Nanosoft nanosoft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nanosof… https://t.co/ZNLYYenynm...

5.8AI score0.00218EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.5 views

PT-2026-25187

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through = 1.3.2...

5.3CVSS5.8AI score0.00224EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.6 views

PT-2026-25195

CVE-2026-32348 Missing Authorization vulnerability in MadrasThemes MAS Videos masvideos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MA… https://t.co/aNSuwN2k7g...

5.3CVSS5.8AI score0.00224EPSS
Exploits0References3
CBLMariner
CBLMariner
added 2026/03/10 10:56 p.m.4 views

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1. An upgraded version of the package is available that resolves this issue...

5.5CVSS5.7AI score0.00204EPSS
Exploits1
CBLMariner
CBLMariner
added 2026/03/10 10:56 p.m.11 views

CVE-2026-3381 affecting package zlib for versions less than 1.3.2-1

CVE-2026-3381 affecting package zlib for versions less than 1.3.2-1. An upgraded version of the package is available that resolves this issue...

9.8CVSS5.7AI score0.00548EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:0 a.m.3 views

Fedora 42 : mingw-zlib (2026-ca44fe35a9)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ca44fe35a9 advisory. Update to 1.3.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

8.6CVSS6.2AI score0.00381EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:0 a.m.4 views

Fedora 43 : mingw-zlib (2026-0aee6ab474)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0aee6ab474 advisory. Update to 1.3.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

8.6CVSS6.2AI score0.00381EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2026/03/10 12:0 a.m.3 views

Fedora: Security Advisory (FEDORA-2026-0aee6ab474)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS6.1AI score0.00381EPSS
Exploits0References4
NVD
NVD
added 2026/03/09 5:16 p.m.7 views

CVE-2025-15568

A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution RCE when the router is configured with sysmode=ap. Successful exploitation results in root-level...

8.5CVSS0.01441EPSS
Exploits0References4
CBLMariner
CBLMariner
added 2026/03/09 2:32 p.m.5 views

CVE-2025-47911 affecting package terraform for versions less than 1.3.2-29

CVE-2025-47911 affecting package terraform for versions less than 1.3.2-29. A patched version of the package is available...

5.3CVSS5.8AI score0.00502EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/06 7:53 a.m.11 views

CVE-2026-28127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue affects Lawyer Directory: from n/a through = 1.3.2...

7.1CVSS5.8AI score0.00146EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/06 7:53 a.m.4 views

CVE-2026-22435

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes ElectroServ electroserv allows PHP Local File Inclusion.This issue affects ElectroServ: from n/a through = 1.3.2...

8.1CVSS5.8AI score0.00504EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/05 11:15 a.m.6 views

WordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Greenville versions = 1.3.2...

5.8AI score0.00504EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2026/03/05 6:30 a.m.6 views

EUVD-2026-9772

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Dr.Patterson dr-patterson allows PHP Local File Inclusion.This issue affects Dr.Patterson: from n/a through = 1.3.2...

8.1CVSS5.9AI score0.00327EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/05 6:30 a.m.7 views

EUVD-2026-9592

Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through = 1.3.2...

5.9AI score0.0051EPSS
Exploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.4 views

CVE-2026-28127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue affects Lawyer Directory: from n/a through = 1.3.2...

7.1CVSS0.00146EPSS
Exploits0References1
NVD
NVD
added 2026/03/05 6:16 a.m.4 views

CVE-2026-22435

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes ElectroServ electroserv allows PHP Local File Inclusion.This issue affects ElectroServ: from n/a through = 1.3.2...

8.1CVSS0.00504EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:54 a.m.11 views

CVE-2026-28127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue affects Lawyer Directory: from n/a through = 1.3.2...

7.1CVSS5.9AI score0.00146EPSS
Exploits0References2
Rows per page
Query Builder