Lucene search
+L

544 matches found

EUVD
EUVD
added 2026/03/25 6:31 p.m.9 views

EUVD-2026-15907

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.3...

8.5CVSS5.9AI score0.00217EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/25 5:17 p.m.4 views

CVE-2026-32534

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.3...

8.5CVSS0.00217EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/25 5:17 p.m.3 views

CVE-2026-32535

Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through = 3.0.3...

6.5CVSS0.00155EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/25 4:15 p.m.24 views

CVE-2026-32534

CVE-2026-32534 describes an SQL Injection issue in the WordPress plugin “JS Help Desk” (js-support-ticket). The connected documentation confirms an authenticated SQL injection vulnerability in this plugin, caused by improper neutralization of SQL elements, affecting versions up to and including 3...

8.5CVSS5.9AI score0.00217EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:15 p.m.3 views

CVE-2026-32534 WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.3...

8.5CVSS5.9AI score0.00217EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.6 views

PT-2026-28049

Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through = 3.0.3...

5.8AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.16 views

PT-2026-28048

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.3...

5.9AI score0.00217EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/25 12:0 a.m.3 views

OPENSUSE-SU-2026:10421-1 kea-3.0.3-1.1 on GA media

These are all security issues fixed in the kea-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.9AI score0.01361EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/03/20 3:17 p.m.9 views

WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Plugin JS Help Desk versions = 3.0.3...

8.5CVSS5.9AI score0.00217EPSS
SaveExploits0Affected Software1
vulnersOsv
vulnersOsv
added 2026/03/07 8:3 p.m.7 views

3extensions (=1.0.1), @51jbs/incremental-coverage-plugin (=1.0.5) +534 more potentially affected by CVE-2022-25912 +1 more via simple-git (>=3.0.3 <=3.35.2)

simple-git NPM version =3.0.3, =1.0.1, =1.0.1, =0.0.0-ad-beta.1, =0.0.0-aj-beta.3, =23.0.0, =35.0.0, =1.4.0, =0.1.5-alpha.0, =1.0.2, =0.0.0-aj-beta.221, =8.7.2, =8.11.4 and more Source cves: CVE-2022-25912, CVE-2026-6951 Source advisory: SNYK:JS-SIMPLEGIT-15456078...

9.8CVSS7.2AI score0.02784EPSS
SaveExploits2
NVD
NVD
added 2026/02/20 4:22 p.m.8 views

CVE-2025-69368

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GT3themes SOHO - Photography WordPress Theme soho allows DOM-Based XSS.This issue affects SOHO - Photography WordPress Theme: from n/a through = 3.0.3...

7.1CVSS0.0023EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.6 views

CVE-2025-67975

Missing Authorization vulnerability in aDirectory aDirectory adirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects aDirectory: from n/a through = 3.0.3...

6.5CVSS0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.32 views

CVE-2025-69368 WordPress SOHO - Photography WordPress Theme theme <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GT3themes SOHO - Photography WordPress Theme soho allows DOM-Based XSS.This issue affects SOHO - Photography WordPress Theme: from n/a through = 3.0.3...

7.1CVSS0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.8 views

PT-2026-21049

Name of the Vulnerable Software and Affected Versions aDirectory versions through 3.0.3 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update aDirector...

5.3AI score0.00316EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.10 views

WordPress plugin aDirectory 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There is a...

6.5CVSS5.8AI score0.00316EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.10 views

WordPress plugin SOHO 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.6AI score0.0023EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/16 4:15 a.m.8 views

CVE-2026-2532

A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embeddingconfig.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initia...

9.8CVSS0.00246EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2026/01/27 7:22 a.m.7 views

WordPress aDirectory plugin <= 3.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin aDirectory versions = 3.0.3...

5.9AI score0.00316EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/01/27 6:15 a.m.15 views

CVE-2026-21408

beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with SYSTEM privileges...

7.3CVSS0.00144EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.13 views

PT-2026-4855

beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with SYSTEM privileges...

7.3CVSS6AI score0.00144EPSS
SaveExploits0References2
Rows per page
Query Builder