Lucene search
K

54 matches found

EUVD
EUVD
added 2026/03/25 6:31 p.m.1 views

EUVD-2026-15910

Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through = 2.08...

9.9CVSS5.8AI score0.00063EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/25 4:15 p.m.2 views

CVE-2026-32536 WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through = 2.08...

9.9CVSS5.8AI score0.00063EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/25 4:15 p.m.1 views

CVE-2026-32536

Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through = 2.08...

5.8AI score0.00063EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.1 views

PT-2026-28050

Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through = 2.08...

5.8AI score0.00063EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/03/20 2:12 p.m.2 views

WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Phat RiO in WordPress Plugin Green Downloads versions = 2.08...

9.9CVSS5.8AI score0.00063EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/11/21 3:31 p.m.1 views

EUVD-2025-198490

The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing unauthenticated users to retrieve a valid session for arbitrary users by knowing their email address...

9.8CVSS6.5AI score0.0021EPSS
Exploits0References2
NVD
NVD
added 2025/11/21 2:15 p.m.2 views

CVE-2025-11127

The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing unauthenticated users to retrieve a valid session for arbitrary users by knowing their email address...

9.8CVSS0.0021EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2005-0075

Malware in sbrugna...

7.2CVSS6.1AI score0.00054EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-17787

Malware in sbrugna...

5.5CVSS7.2AI score0.00184EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/02/20 12:0 a.m.3 views

PT-2024-17959 · WordPress · The Login Lockdown – Protect Login Form

Name of the Vulnerable Software and Affected Versions: The Login Lockdown – Protect Login Form plugin for WordPress versions up to, and including, 2.08 Description: The issue is related to a missing capability check on the generate export file function. This allows authenticated attackers with...

5.4CVSS6AI score0.00219EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2022/10/06 12:0 a.m.8 views

PT-2022-26440 · Generex · Generex Cs141

Name of the Vulnerable Software and Affected Versions: Generex CS141 versions 2.08 through 2.10 Description: The issue allows remote command execution by administrators via a web interface that reaches run update in /usr/bin/gxserve-update.sh. This can occur, for example, via a reverse shell...

9.1CVSS7.5AI score0.06451EPSS
Exploits2References8
CNNVD
CNNVD
added 2022/10/06 12:0 a.m.9 views

Generex UPS Adapter CS141 安全漏洞

Generex UPS Adapter CS141 is a UPS Uninterruptible Power System adapter from Generex, a German company.A command execution vulnerability exists in Generex UPS Adapter CS141 versions prior to 2.08, which originates from the web of runupdate in /usr/bin/gxservice -update.sh interface fails to...

9.1CVSS7.2AI score0.06451EPSS
Exploits2References6
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.1 views

CVE-2022-29731

An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users...

4.3CVSS5.9AI score0.00106EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.3 views

ICT Protege GX和ICT Protege WX 安全漏洞

ICT Protege GX and ICT Protege WX are both products of ICT Corporation.ICT Protege GX is an enterprise-grade integrated access control, intruder detection, and building automation solution with an easy-to-operate, easy-to-integrate, and easy-to-scalable feature set.ICT Protege WX is a game-changi...

4.3CVSS5.2AI score0.00106EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.0 views

ICT Protege GX和ICT Protege WX 跨站脚本漏洞

ICT Protege GX and ICT Protege WX are both products of ICT Corporation.ICT Protege GX is an enterprise-grade integrated access control, intruder detection, and building automation solution with an easy-to-operate, easy-to-integrate, and easy-to-scalable feature set.ICT Protege WX is a game-changi...

5.4CVSS6.2AI score0.00576EPSS
Exploits1References3
Zero Science Lab
Zero Science Lab
added 2022/03/21 12:0 a.m.282 views

ICT Protege GX/WX 2.08 Client-Side SHA1 Password Hash Disclosure

Summary Protege GX is an enterprise level integrated access control, intrusion detection and building automation solution with a feature set that is easy to operate, simple to integrate and effortless to extend. Protege WX is an all-in-one, web-based, cross-platform system that gives you a fully...

4.3CVSS5.8AI score0.00106EPSS
Exploits1
OPENSUSE Linux
OPENSUSE Linux
added 2018/09/22 9:15 a.m.56 views

Security update for python-Django (moderate)

This update for python-Django to version 2.08 fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14574: Fixed an redirection vulnerability in CommonMiddleware boo1102680 The following other bugs were fixed: - Fixed a regression in Django 2.0.7 that broke the...

1.9AI score0.0748EPSS
Exploits0References1
Prion
Prion
added 2017/05/08 2:29 p.m.16 views

Code injection

The lzo1xdecompress function in lzo1xd.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive...

4.3CVSS5.3AI score0.00184EPSS
Exploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2017/05/08 2:29 p.m.22 views

CVE-2017-8845

The lzo1xdecompress function in lzo1xd.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive...

5.5CVSS6.9AI score0.00184EPSS
Exploits0References2
NVD
NVD
added 2017/05/08 2:29 p.m.11 views

CVE-2017-8845

The lzo1xdecompress function in lzo1xd.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted archive...

5.5CVSS5.4AI score0.00184EPSS
Exploits0References3
Rows per page
Query Builder