CVE-2026-10075 Interinfo｜DreamMaker - Path Traversal

DreamMaker developed by Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to read file names under arbitrary path by exploiting an Absolute Path Traversal vulnerability...

CVE-2013-10075

creationtimestamp| type| source ---|---|--- 2026-05-08 09:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldgif6juy2p 2026-05-08 16:36:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mle5zmsfr22v...

DEBIAN-CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DBFile will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted...

CVE-2020-10075

GitLab 12.5 through 12.8.1 allows HTML Injection. A particular error header was potentially susceptible to injection or potentially other vulnerabilities via unescaped input...

CVE-2025-10075

creationtimestamp| type| source ---|---|--- 2025-09-08 03:46:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lycc6aulbx2h...

CVE-2014-10075

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field...

CVE-2024-10075

creationtimestamp| type| source ---|---|--- 2025-05-20 16:40:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17006...

WordPress Jetpack plugin < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution vulnerability

Unauthenticated Arbitrary Block & Shortcode Execution vulnerability discovered by Marc Montpas in WordPress Plugin Jetpack versions 13.8...

CVE-2024-10075 Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution

The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block...

CVE-2024-10075

The CVE-2024-10075 entry concerns the WordPress Jetpack plugin (pre-13.8). The vulnerability arises from insufficient access control on posts created by the Contact Form, allowing unauthenticated users to access those posts and potentially execute arbitrary shortcodes. The underlying impact is th...

SUSE CVE-2016-10075

The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...

CVE-2015-10075

creationtimestamp| type| source ---|---|--- 2023-02-07 14:23:25+00:00| seen| https://t.me/cibsecurity/57649...

CVE-2015-10075 Custom-Content-Width custom-content-width.php register_settings cross site scripting

A vulnerability was found in Custom-Content-Width 1.0. It has been declared as problematic. Affected by this vulnerability is the function overridecontentwidth/registersettings of the file custom-content-width.php. The manipulation leads to cross site scripting. The attack can be launched remotel...

CVE-2015-10075

Summary of CVE-2015-10075 / Custom-Content-Width : The vulnerability affects the Custom-Content-Width 1.0 plugin, specifically the function override_content_width/register_settings in custom-content-width.php. The issue allows remote cross-site scripting (XSS) due to the underlying handling in th...

CVE-2020-10075

GitLab 12.5 through 12.8.1 allows HTML Injection. A particular error header was potentially susceptible to injection or potentially other vulnerabilities via unescaped input...

CVE-2020-10075

GitLab 12.5 through 12.8.1 allows HTML Injection. A particular error header was potentially susceptible to injection or potentially other vulnerabilities via unescaped input...

CVE-2020-10075

GitLab 12.5–12.8.1 contains an HTML injection vulnerability. The issue arises from unescaped input in a particular error header, potentially enabling injection or related issues. Affected product: GitLab (self-hosted) versions 12.5 through 12.8.1. Root cause: unescaped input in an error header le...

CVE-2019-10075

...

CVE-2019-10075

CVE-2019-10075 is rejected/not used; this entry does not represent an active vulnerability.