Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:54 a.m.5 views

CVE-2020-12733

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account...

7.5CVSS7.2AI score0.00286EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:26 a.m.4 views

CVE-2019-12733

SiteVision 4 allows Remote Code Execution...

9CVSS7.3AI score0.16675EPSS
Exploits5References1
Circl
Circl
added 2025/11/13 4:25 a.m.4 views

CVE-2025-12733

creationtimestamp| type| source ---|---|--- 2025-11-13 04:25:50+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5id53pamoy2 2025-11-13 05:58:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5iideieu22n 2025-11-13 07:40:33+00:00| seen|...

8.8CVSS5.7AI score0.00259EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/11/12 11:21 p.m.4 views

WordPress Import any XML, CSV or Excel File to WordPress (WP All Import) plugin <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic vulnerability

Authenticated Administrator+ Remote Code Execution via Conditional Logic vulnerability discovered by tmrswrr in WordPress Plugin WP All Import versions = 3.9.6...

8.8CVSS7.2AI score0.00259EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/05/18 11:58 p.m.5 views

WordPress AffiliateImporterEb plugin <= 1.0.6 - Reflected XSS via Search vulnerability

Reflected XSS via Search vulnerability discovered by Bob Matyas in WordPress Plugin AffiliateImporterEb versions = 1.0.6...

6.1CVSS6.2AI score0.00181EPSS
Exploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/17 9:3 p.m.5 views

CVE-2024-12733

The AffiliateImporterEb WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6.1AI score0.00181EPSS
Exploits1References1
NVD
NVD
added 2025/05/15 8:15 p.m.5 views

CVE-2024-12733

The AffiliateImporterEb WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS0.00181EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/05/15 8:6 p.m.4 views

CVE-2024-12733 AffiliateImporterEb <= 1.0.6 - Reflected XSS via Search

The AffiliateImporterEb WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1AI score0.00181EPSS
Exploits1References1
CVE
CVE
added 2025/05/15 8:6 p.m.22 views

CVE-2024-12733

The CVE-2024-12733 entry applies to the AffiliateImporterEb WordPress plugin (versions 1.0.0–1.0.6). The vulnerability is a Reflected Cross-Site Scripting caused by insufficient sanitisation/escaping of an input parameter before echoing it on the page, with impact described as exploitable against...

6.1CVSS5.8AI score0.00181EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2024/03/07 10:46 p.m.3 views

CVE-2019-12733

creationtimestamp| type| source ---|---|--- 2024-03-07 22:46:36+00:00| seen| https://t.me/ctinow/202850...

9CVSS8.1AI score0.16675EPSS
Exploits5References1
CVE
CVE
added 2021/07/15 3:4 p.m.36 views

CVE-2020-12733

Summary of CVE-2020-12733 : A vulnerability in DEPSTECH WiFi Digital Microscope 3 (uses Shenzhen PENGLIXIN components) allows a TELNET connection using the molinkadmin password for the molink account. Documented across multiple sources (NVD, Red Hat, CVE listings, CNNVD) with consistent descripti...

7.5CVSS7.6AI score0.00286EPSS
Exploits1References2Affected Software1
0day.today
0day.today
added 2019/12/08 12:0 a.m.345 views

SiteVision 4.x / 5.x Remote Code Execution Exploit #RCE

Exploit for jsp platform in category web applications SiteVision Remote Code Execution CVE-2019-12733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12733 https://www.cybercom.com/About-Cybercom/Blogs/Security-Advisories/high-risk-vulnerabilities-in-cms-product/ Summary Attackers may...

8.7AI score0.16675EPSS
Exploits6
OSV
OSV
added 2019/12/06 5:15 p.m.1 views

CVE-2019-12733

SiteVision 4 allows Remote Code Execution...

8.8CVSS7.4AI score
Exploits0References6
Cvelist
Cvelist
added 2019/12/06 4:46 p.m.12 views

CVE-2019-12733

SiteVision 4 allows Remote Code Execution...

8.9AI score0.16675EPSS
Exploits5References6
CVE
CVE
added 2019/12/06 4:46 p.m.84 views

CVE-2019-12733

SiteVision 4.x (up to 4.5.6) and SiteVision 5.x (up to 5.1.1) are affected by CVE-2019-12733. The issue arises from insufficient validation of whether a user is permitted to add or edit modules of type “script,” enabling a low-privilege user (e.g., Editor) to inject or modify a script module and ...

9CVSS8.8AI score0.16675EPSS
Exploits5References6Affected Software1
Cvelist
Cvelist
added 2017/09/09 1:0 a.m.16 views

CVE-2017-12733

A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may crea...

9.7AI score0.0125EPSS
Exploits0References2
CVE
CVE
added 2017/09/09 1:0 a.m.57 views

CVE-2017-12733

CVE-2017-12733 affects OPW Fuel Management Systems SiteSentinel Integra 100, Integra 500, and SiteSentinel iSite ATG consoles with firmware older than V175, V175–V189, V191–V195, and V16Q3.1. The vulnerability arises from Missing Authentication for a Critical Function, allowing an attacker to cre...

9.8CVSS9.5AI score0.0125EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder