Lucene search
K

19 matches found

Circl
Circl
added 2026/05/12 10:21 a.m.6 views

CVE-2026-28993

creationtimestamp| type| source ---|---|--- 2026-05-12 10:21:51+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-apple-macos-security-update-review 2026-05-12 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260513 2026-05-26...

5.5CVSS5.7AI score0.00012EPSS
Exploits0References4
NVD
NVD
added 2025/06/27 12:15 p.m.2 views

CVE-2025-28993

Improper Control of Generation of Code 'Code Injection' vulnerability in Jose Mortellaro Content No Cache content-no-cache allows Code Injection.This issue affects Content No Cache: from n/a through = 0.1.4...

8.6CVSS0.00264EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/27 11:52 a.m.2 views

CVE-2025-28993 WordPress Content No Cache plugin <= 0.1.4 - Arbitrary Function Call vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Jose Mortellaro Content No Cache content-no-cache allows Code Injection.This issue affects Content No Cache: from n/a through = 0.1.4...

8.6CVSS5.2AI score0.00264EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/27 11:52 a.m.8 views

CVE-2025-28993 WordPress Content No Cache plugin <= 0.1.4 - Arbitrary Function Call vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Jose Mortellaro Content No Cache content-no-cache allows Code Injection.This issue affects Content No Cache: from n/a through = 0.1.4...

8.6CVSS0.00264EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/06/23 7:36 a.m.9 views

WordPress Content No Cache plugin <= 0.1.4 - Arbitrary Function Call vulnerability

Arbitrary Function Call vulnerability discovered by HLog in WordPress Plugin Content No Cache versions = 0.1.4...

8.6CVSS6.8AI score0.00264EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 10:44 p.m.4 views

CVE-2022-28993

Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request...

9.8CVSS6.8AI score0.00358EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:58 p.m.2 views

CVE-2021-28993

Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information remote...

7.5CVSS7.1AI score0.00304EPSS
Exploits0References1
Circl
Circl
added 2024/07/17 6:13 p.m.1 views

CVE-2024-28993

creationtimestamp| type| source ---|---|--- 2024-07-17 18:13:01+00:00| seen| https://t.me/cvedetector/1083...

8.3CVSS4.8AI score0.00636EPSS
Exploits0References1
OSV
OSV
added 2024/07/17 3:15 p.m.0 views

CVE-2024-28993

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information...

8.3CVSS5.9AI score
Exploits0References1
Circl
Circl
added 2023/04/07 4:28 p.m.0 views

CVE-2023-28993

creationtimestamp| type| source ---|---|--- 2023-04-07 16:28:07+00:00| seen| https://t.me/cibsecurity/61666...

7.1CVSS7.1AI score0.00199EPSS
Exploits0References1
CVE
CVE
added 2023/04/07 11:26 a.m.37 views

CVE-2023-28993

Mode C: CVE-2023-28993 describes an unauthenticated reflected XSS in the WordPress plugin Albo Pretorio On Line (versions

7.1CVSS6.1AI score0.00199EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/07 11:26 a.m.12 views

CVE-2023-28993 WordPress Albo Pretorio Online Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ignazio Scimone Albo Pretorio On Line plugin = 4.6.1 versions...

7.1CVSS6.3AI score0.00199EPSS
Exploits0References1
NVD
NVD
added 2022/05/20 1:15 p.m.9 views

CVE-2022-28993

Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request...

9.8CVSS0.00358EPSS
Exploits1References1
CVE
CVE
added 2022/05/20 12:53 p.m.55 views

CVE-2022-28993

The CVE-2022-28993 entry concerns Multi Store Inventory Management System v1.0 with an authorization issue that enables account takeover via a crafted POST request. Affected component is the web application’s access control logic; root cause is not explicitly detailed across sources, but multiple...

9.8CVSS9.2AI score0.00358EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2021/06/30 1:15 p.m.7 views

CVE-2021-28993

Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information remote...

7.5CVSS0.00304EPSS
Exploits0References2
CVE
CVE
added 2021/06/30 12:18 p.m.40 views

CVE-2021-28993

CVE-2021-28993 affects Plixer Scrutinizer 19.0.2 with an SQL injection vulnerability that allows an attacker to obtain sensitive information remotely. Multiple connected sources (NVD/NVD-derived entries, Red Hat advisory, CNVD, PRION, OpenVAS plugin) confirm the existence of a SQLi flaw in Scruti...

7.5CVSS7.6AI score0.00304EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2020/12/01 6:54 p.m.1 views

CVE-2020-28993

creationtimestamp| type| source ---|---|--- 2020-12-01 18:54:07+00:00| seen| https://t.me/cibsecurity/16985...

7.5CVSS7.4AI score0.13233EPSS
Exploits1References1
NVD
NVD
added 2020/12/01 4:15 p.m.9 views

CVE-2020-28993

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request...

7.5CVSS7.5AI score0.13233EPSS
Exploits1References2
CVE
CVE
added 2020/12/01 3:4 p.m.38 views

CVE-2020-28993

CVE-2020-28993 describes a Directory Traversal vulnerability in ATX miniCMTS200a Broadband Gateway (through 2.0) and Pico CMTS (through 2.0) that could allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request. The NVD entry lists CVSSv3.1 base sc...

7.5CVSS7.5AI score0.13233EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder