Lucene search
+L

22 matches found

Circl
Circl
•added 2025/11/25 2:00 a.m.•17 views

CVE-2025-10144

creationtimestamp| type| source ---|---|--- 2025-11-25 02:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gam2wkko2q...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/25 3:15 a.m.•19 views

CVE-2015-10144

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary...

8.8CVSS0.03129EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2025/07/25 2:23 a.m.•34 views

CVE-2015-10144 Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary...

8.8CVSS0.03129EPSS
SaveExploits2References5
CVE
CVE
•added 2025/07/25 2:23 a.m.•110 views

CVE-2015-10144

CVE-2015-10144 affects the WordPress plugin Responsive Thumbnail Slider prior to 1.0.1. The root cause is inadequate validation/sanitization in the image uploader, allowing authenticated attackers (subscriber level or higher) to upload arbitrary files via a double extension, with potential remote...

8.8CVSS6.2AI score0.03129EPSS
SaveExploits2References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/17 9:03 p.m.•17 views

CVE-2024-10144

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.7AI score0.00326EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/05/17 12:08 a.m.•19 views

WordPress Robo Gallery plugin < 3.2.22 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Robo Gallery versions 3.2.22...

4.8CVSS8AI score0.00326EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2025/05/15 8:15 p.m.•17 views

CVE-2024-10144

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00326EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/15 8:15 p.m.•17 views

CVE-2024-10144

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS0.00326EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/15 8:06 p.m.•27 views

CVE-2024-10144 Photo Gallery, Images, Slider in Rbs Image Gallery < 3.2.22 - Contributor+ Stored XSS

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

0.00326EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2016-10144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check. CVE-2016-10144 Note that Nessus relies on th...

9.8CVSS6.8AI score0.04994EPSS
SaveExploits0References2
Mend
Mend
•added 2023/04/05 12:00 a.m.•2 views

MSC-2023-10144

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

8.8CVSS5.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•44 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2019-1970)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.06129EPSS
SaveExploits3References2
Circl
Circl
•added 2019/06/04 8:15 a.m.•18 views

CVE-2019-10144

creationtimestamp| type| source ---|---|--- 2019-06-04 08:15:07+00:00| seen| https://t.me/SecLabNews/5053...

7.7CVSS7AI score0.00471EPSS
SaveExploits1References1
OSV
OSV
•added 2019/06/03 7:29 p.m.•29 views

CVE-2019-10144

rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are given all capabilities during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...

7.7CVSS6.7AI score
SaveExploits0References2
CVE
CVE
•added 2019/06/03 6:19 p.m.•124 views

CVE-2019-10144

CVE-2019-10144 affects rkt up to version 1.30.0. In containers started with rkt enter, processes are granted all capabilities during stage 2, which could allow compromised containers to access host resources. The connected documents confirm the root cause is lack of isolation in this scenario and...

7.7CVSS7.4AI score0.00471EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2019/01/17 3:00 p.m.•27 views

CVE-2018-10144

CVE-2018-10144 is rejected/not used per the description; this ID does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2019/01/17 3:00 p.m.•12 views

CVE-2018-10144

...

SaveExploits0
CVE
CVE
•added 2017/08/08 3:00 p.m.•84 views

CVE-2017-10144

Vulnerability CVE-2017-10144 affects Oracle E-Business Suite, Oracle Applications Manager (subcomponent Oracle Diagnostics Interfaces). The affected version is 12.1.3. An unauthenticated attacker who can reach Oracle Applications Manager over HTTP can compromise it, with the impact described as a...

7.5CVSS7.4AI score0.02822EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2017/03/24 3:00 p.m.•130 views

CVE-2016-10144

CVE-2016-10144 affects ImageMagick (coders/ipl.c) where a missing malloc check enables remote attackers to achieve an unspecified impact. The vulnerability is documented with high CVSS potential; Nessus entries indicate some distros may be unpatched (vendor patches not available). No exploit spec...

9.8CVSS7.8AI score0.04994EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2017/03/24 3:00 p.m.•53 views

CVE-2016-10144

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...

8.3AI score0.04994EPSS
SaveExploits0References7
Rows per page
Query Builder