Lucene search
K

108 matches found

Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.7 views

PT-2026-31314

Name of the Vulnerable Software and Affected Versions ProSolution WP Client plugin for WordPress versions up to and including 1.9.9 Description The ProSolution WP Client plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation within the proSol...

9.8CVSS6.2AI score0.00184EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.1 views

PT-2026-28129

Name of the Vulnerable Software and Affected Versions Sonarr versions prior to 4.0.16.2942 Description Sonarr is a PVR for Usenet and BitTorrent users. A flaw exists where authentication could be bypassed in versions with authentication disabled for local addresses Authentication Required set to:...

8.1CVSS5.8AI score0.00038EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-4872

Malware in sbrugna...

7.2CVSS6.1AI score0.00984EPSS
Exploits5References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-3475

Malware in sbrugna...

2.1CVSS4.6AI score0.0008EPSS
Exploits1References22
Chainguard
Chainguard
added 2025/08/23 2:16 p.m.4 views

CVE-2018-2942 vulnerabilities

Vulnerabilities for packages: openjdk-17-openj9, openjdk-8-openj9, openjdk-21-openj9, openjdk-11-openj9...

8.3CVSS6.6AI score0.00698EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/07/13 6:22 a.m.3 views

CVE-2025-2942

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...

4.3CVSS7.4AI score0.00262EPSS
Exploits1References1
Patchstack
Patchstack
added 2025/07/11 9:4 p.m.4 views

WordPress Order Delivery Date Pro for WooCommerce plugin < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure vulnerability

Unauthenticated Arbitrary Post Title Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Order Delivery Date for WP e-Commerce versions 12.6.0...

4.3CVSS6.8AI score0.00262EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2025/07/11 6:21 a.m.0 views

CVE-2025-2942

creationtimestamp| type| source ---|---|--- 2025-07-11 06:21:51+00:00| seen| Telegram/WLwV52FoZPANVhBPyA8MnK8Kiup-Frf40ZyX34yS0E57WvE...

4.3CVSS4.8AI score0.00262EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2025/07/11 6:0 a.m.2 views

CVE-2025-2942 Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...

7.1AI score0.00262EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/07/11 6:0 a.m.4 views

CVE-2025-2942 Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...

0.00262EPSS
Exploits1References1
CVE
CVE
added 2024/03/27 2:0 a.m.58 views

CVE-2024-2942

CVE-2024-2942 affects Campcodes Online Examination System 1.0, leveraging SQL injection via the id parameter in /adminpanel/admin/query/deleteQuestionExe.php. Multiple connected sources confirm remote exploitation potential and that the vulnerability stems from unsanitized input in deleteQuestion...

6.5CVSS6.8AI score0.00095EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/27 2:0 a.m.12 views

CVE-2024-2942 Campcodes Online Examination System deleteQuestionExe.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. This affects an unknown part of the file /adminpanel/admin/query/deleteQuestionExe.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

6.5CVSS6.8AI score0.00095EPSS
Exploits1References4
Circl
Circl
added 2023/05/28 2:29 a.m.0 views

CVE-2023-2942

creationtimestamp| type| source ---|---|--- 2023-05-28 02:29:43+00:00| seen| https://t.me/cibsecurity/64744...

8.1CVSS7.9AI score0.00457EPSS
Exploits1References1
NVD
NVD
added 2023/05/27 10:15 p.m.9 views

CVE-2023-2942

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...

8.1CVSS8.2AI score0.00457EPSS
Exploits1References2
CVE
CVE
added 2023/05/27 12:0 a.m.41 views

CVE-2023-2942

OpenEMR/OpenEMR before v7.0.1 is affected by an improper input validation flaw in the application that can impact confidentiality and integrity. Multiple sources concur on the issue, with CVSS 3.1/3.0 base scores around 8.1 (HIGH) and a network-based, low–complexity vector. The problem is tied to...

8.1CVSS8.1AI score0.00457EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/05/27 12:0 a.m.17 views

CVE-2023-2942 Improper Input Validation in openemr/openemr

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...

8.1CVSS8.4AI score0.00457EPSS
Exploits1References2
OSV
OSV
added 2023/05/27 12:0 a.m.10 views

CVE-2023-2942 Improper Input Validation in openemr/openemr

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...

8.1CVSS8.2AI score0.00457EPSS
Exploits1References4
F5 Networks
F5 Networks
added 2023/05/17 1:52 p.m.27 views

K000134636: Java vulnerabilities CVE-2018-2942 and CVE-2018-2938

Security Advisory Description CVE-2018-2942 Vulnerability in the Java SE component of Oracle Java SE subcomponent: Windows DLL. Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

9CVSS7.7AI score0.00772EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:51 a.m.1 views

SUSE CVE-2011-2942

A certain Red Hat patch to the brdeliver function in net/bridge/brforward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5 allows remote attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging...

6.8CVSS7.1AI score0.00319EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:47 a.m.1 views

SUSE CVE-2012-2391

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2942. Reason: This candidate is a duplicate of CVE-2012-2942. Notes: All CVE users should reference CVE-2012-2942 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

7AI score
Exploits0References3
Rows per page
Query Builder