Lucene search
+L

127 matches found

Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•124 views

Eyou E-Mail <3.6 - Remote Code Execution

Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/iploginset/diploginget.php via the getloginipconfigfile function. id: CVE-2014-1203 info: name: Eyou E-Mail 3.6 - Remote Code Execution author: pikpik...

9.8CVSS8.6AI score0.15647EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/01 6:23 p.m.•21 views

ECHO-1203-94CA-1CEE Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

5.5CVSS5.4AI score0.00129EPSS
SaveExploits0References1
Circl
Circl
•added 2026/01/20 2:26 a.m.•11 views

CVE-2026-1203

creationtimestamp| type| source ---|---|--- 2026-01-20 02:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mct47czlsa2g...

8.1CVSS5AI score0.00792EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/01/20 1:02 a.m.•46 views

CVE-2026-1203 CRMEB JSON Token LoginServices.php remoteRegister improper authentication

A weakness has been identified in CRMEB up to 5.6.3. The impacted element is the function remoteRegister of the file crmeb/app/services/user/LoginServices.php of the component JSON Token Handler. Executing a manipulation of the argument uid can lead to improper authentication. The attack may be...

6.3CVSS0.00792EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-1203

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00429EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-45233

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.02793EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/23 5:04 a.m.•16 views

CVE-2023-1203

Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule...

6.5CVSS6.8AI score0.01056EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:39 a.m.•14 views

CVE-2016-1203

Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 Build427 and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded...

8.1CVSS7AI score0.00572EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/07 9:56 p.m.•15 views

WordPress Slider, Gallery, Carousel by MetaSlider plugin < 3.95.0 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Responsive Slider by MetaSlider versions 3.95.0...

3.5CVSS7.4AI score0.00291EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/26 6:38 a.m.•15 views

CVE-2025-1203

The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privilege users such as editor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example ...

3.5CVSS5.9AI score0.00291EPSS
SaveExploits1References1
Circl
Circl
•added 2025/03/24 8:22 a.m.•16 views

CVE-2025-1203

creationtimestamp| type| source ---|---|--- 2025-03-24 08:22:00+00:00| seen| https://t.me/cvedetector/20936 2025-03-24 10:34:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4kmoujdd26...

8.7AI score0.00291EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/03/24 6:00 a.m.•9 views

CVE-2025-1203 Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSS

The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which could allow high privilege users such as editor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example ...

5.8AI score0.00291EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/24 6:00 a.m.•76 views

CVE-2025-1203

The Slider, Gallery, and Carousel by MetaSlider WordPress plugin, in versions prior to 3.95.0 , is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as editor...

5.8AI score0.00291EPSS
SaveExploits1References1Affected Software1
Circl
Circl
•added 2025/03/08 4:34 a.m.•13 views

CVE-2023-1203

creationtimestamp| type| source ---|---|--- 2025-03-08 04:34:10+00:00| seen| Telegram/kMKq5zKvDIdYYLNtnmn9i08AYJArG59OufZX5JjO20FLWL...

6.5CVSS4.8AI score0.01056EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 5:26 a.m.•21 views

CVE-2024-1203

The Conversios – Google Analytics 4 GA4, Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'valueData' parameter in all versions up to, and including, 7.0.7 due to insufficient escaping on the user supplied parameter and lack of...

8.8CVSS7.2AI score0.00821EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/03/14 12:00 a.m.•22 views

WordPress Conversios.io Plugin <= 7.0.7 is vulnerable to SQL Injection

Software Conversios.io Type Plugin Vulnerable versions = 7.0.7 Fixed in 7.0.8 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1203 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 047c3aed63ee Credits Krzysztof Zając Required privilege Subscriber...

8.8CVSS6.8AI score0.00821EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2024/03/13 3:26 p.m.•85 views

CVE-2024-1203

CVE-2024-1203 involves the Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce WordPress plugin. The root cause is insufficient escaping and improper preparation of SQL queries in the valueData parameter, enabling authenticated attackers with subscriber...

8.8CVSS7.2AI score0.00821EPSS
SaveExploits0References3Affected Software1
Circl
Circl
•added 2023/10/31 3:50 p.m.•15 views

CVE-2016-1203

creationtimestamp| type| source ---|---|--- 2023-10-31 15:50:57+00:00| seen| https://t.me/cibsecurity/73225...

8.1CVSS6.6AI score0.00572EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/31 1:15 p.m.•28 views

CVE-2016-1203

Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 Build427 and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded...

8.1CVSS8AI score0.00572EPSS
SaveExploits0References2
OSV
OSV
•added 2023/10/31 1:15 p.m.•13 views

CVE-2016-1203

Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 Build427 and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded...

8.1CVSS5.8AI score0.00572EPSS
SaveExploits0References2
Rows per page
Query Builder