Lucene search
K

38 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-39661

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magentech SW Core allows PHP Local File Inclusion. This issue affects SW Core: from n/a through 1.7.18...

7.5CVSS5.5AI score0.00127EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/26 7:49 a.m.6 views

CVE-2026-39661 WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magentech SW Core allows PHP Local File Inclusion. This issue affects SW Core: from n/a through 1.7.18...

7.5CVSS5.8AI score0.00127EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/26 7:49 a.m.33 views

CVE-2026-39661 WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magentech SW Core allows PHP Local File Inclusion. This issue affects SW Core: from n/a through 1.7.18...

7.5CVSS0.00127EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/26 7:49 a.m.7 views

EUVD-2026-31802

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magentech SW Core allows PHP Local File Inclusion. This issue affects SW Core: from n/a through 1.7.18...

7.5CVSS5.8AI score0.00127EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/26 7:49 a.m.4 views

CVE-2026-39661

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magentech SW Core allows PHP Local File Inclusion. This issue affects SW Core: from n/a through 1.7.18...

7.5CVSS5.8AI score0.00127EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/05/26 6:50 a.m.12 views

WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin SW Core versions = 1.7.18...

7.5CVSS5.8AI score0.00127EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.7 views

PT-2026-43206

Name of the Vulnerable Software and Affected Versions Magentech SW Core versions prior to 1.7.18 Description Improper Control of Filename for Include/Require Statement in PHP Program PHP Remote File Inclusion allows for PHP Local File Inclusion. This occurs when the application fails to properly...

7.5CVSS5.8AI score0.00127EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/02/20 1:27 p.m.2 views

CVE-2026-25420

Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through = 1.7.18...

4.3CVSS5.5AI score0.00053EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.0 views

CVE-2026-25420

Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through = 1.7.18...

4.3CVSS0.00053EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:27 a.m.1 views

CVE-2026-25420

Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through = 1.7.18...

5.5AI score0.00053EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/19 8:27 a.m.0 views

CVE-2026-25420 WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through = 1.7.18...

5.5AI score0.00053EPSS
Exploits0References1
CVE
CVE
added 2026/02/19 8:27 a.m.6 views

CVE-2026-25420

The CVE-cited issue affects the WordPress MailerLite plugin, versions up to and including 1.7.18. The root cause is Missing/Incorrect Authorization due to broken access control in the official-mailerlite-sign-up-forms flow. Public mappings across Red Hat, NVD, CVE listing, and vulnerability datab...

4.3CVSS5.4AI score0.00053EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:27 a.m.25 views

CVE-2026-25420 WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through = 1.7.18...

4.3CVSS0.00053EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.2 views

PT-2026-20742

Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailerLite: from n/a through = 1.7.18...

5.5AI score0.00053EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/28 8:48 a.m.2 views

WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin MailerLite versions = 1.7.18...

4.3CVSS5.4AI score0.00053EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:5 a.m.6 views

CVE-2024-34371

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.7.18...

4.3CVSS5.9AI score0.00217EPSS
Exploits0References1
OSV
OSV
added 2025/10/11 1:20 p.m.1 views

OESA-2025-2376 cjson security update

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - %description devel The cjson-devel package contains libraries and header files for developing...

9.8CVSS7.1AI score0.00273EPSS
Exploits1References2
OSV
OSV
added 2025/10/11 1:20 p.m.1 views

OESA-2025-2375 cjson security update

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - %description devel The cjson-devel package contains libraries and header files for developing...

9.8CVSS7.1AI score0.00273EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-26527

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00273EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-34743

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00217EPSS
Exploits0References1
Rows per page
Query Builder