Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/11/28 9:10 a.m.3 views

CVE-2025-13536

The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the...

8.8CVSS7.4AI score0.00243EPSS
Exploits0References1
Circl
Circl
added 2025/11/27 11:50 a.m.4 views

CVE-2025-13536

creationtimestamp| type| source ---|---|--- 2025-11-27 11:50:03+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m6mcikegbu22 2025-11-27 22:04:02+00:00| seen| https://gist.github.com/Darkcrai86/dc3c9dbc8abb3440b4fd4054f281d069...

8.8CVSS5.7AI score0.00243EPSS
Exploits0References2
NVD
NVD
added 2025/01/21 5:15 a.m.11 views

CVE-2024-13536

The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...

5.3CVSS0.00467EPSS
Exploits0References2
Circl
Circl
added 2025/01/21 4:26 a.m.1 views

CVE-2024-13536

creationtimestamp| type| source ---|---|--- 2025-01-21 04:26:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113864448812079089 2025-01-21 05:01:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2376 2025-01-21 05:15:26+00:00| seen|...

5.3CVSS6.7AI score0.00467EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/01/21 4:20 a.m.13 views

CVE-2024-13536 1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure

The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...

5.3CVSS0.00467EPSS
Exploits0References2
CVE
CVE
added 2025/01/21 4:20 a.m.53 views

CVE-2024-13536

CVE-2024-13536 affects the WordPress plugin “1003 Mortgage Application” (versions up to 1.87). The vulnerability is a Full Path Disclosure caused by the publicly accessible /inc/class/fnm/export.php when error logging is enabled, enabling unauthenticated attackers to retrieve the webapp’s full pa...

5.3CVSS5.1AI score0.00467EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/21 4:20 a.m.4 views

CVE-2024-13536 1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure

The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87. This is due the /inc/class/fnm/export.php file being publicly accessible with error logging enabled. This makes it possible for unauthenticated attackers to retriev...

5.3CVSS6.5AI score0.00467EPSS
Exploits0References2
Circl
Circl
added 2020/11/06 12:49 a.m.3 views

CVE-2020-13536

creationtimestamp| type| source ---|---|--- 2020-11-06 00:49:40+00:00| seen| https://t.me/cibsecurity/15905...

9.3CVSS8.4AI score0.00032EPSS
Exploits1References1
Cvelist
Cvelist
added 2020/11/05 8:9 p.m.11 views

CVE-2020-13536

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary. By default MXViewService, which starts as a NT SYSTEM authority...

9.3CVSS7.5AI score0.00032EPSS
Exploits1References1
CVE
CVE
added 2020/11/05 8:9 p.m.57 views

CVE-2020-13536

Moxa MXView Series 3.1.8 contains a local privilege escalation (CVE-2020-13536) via file-permission misconfigurations that allow an attacker with local access to modify files executed by MXViewService. Talos documents exploitation paths through the execution chain: services.exe -&gt; MXViewServic...

9.3CVSS7.5AI score0.00032EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/09/11 8:49 p.m.11 views

CVE-2019-13536

Delta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to remotely execute arbitrary code...

8.1AI score0.00504EPSS
Exploits0References1
CVE
CVE
added 2019/09/11 8:49 p.m.53 views

CVE-2019-13536

Delta Electronics TPEditor (Windows) prior to or equal to version 1.94 contains a heap-based buffer overflow in the parsing/processing of TPE files (specifically crafted project files). The vulnerability can allow remote code execution, with exploitation described as requiring user interaction in...

7.8CVSS8AI score0.00504EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/07/09 6:0 a.m.33 views

CVE-2018-13536

The CVE-2018-13536 entry concerns ERC20_ICO: mintToken in the smart contract exhibits an integer overflow. This weakness allows the contract owner to arbitrarily set any user’s balance. Affected component: mintToken in the ERC20_ICO contract. Root cause: integer overflow in the balance assignment...

7.5CVSS7.7AI score0.00237EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.28 views

Fedora Update for kernel FEDORA-2013-13536

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-13536 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.9CVSS1.5AI score0.15108EPSS
Exploits31References2
Rows per page
Query Builder