Lucene search
K

49 matches found

NVD
NVD
added yesterday5 views

CVE-2026-6274

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

9.8CVSS0.0005EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-6274

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

9.8CVSS5.5AI score0.0005EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added yesterday6 views

PT-2026-47062

🚨 Multiple Critical Vulnerabilities Disclosed in DbGate Several severe vulnerabilities in DbGate can allow attackers to achieve remote code execution: • CVE-2026-47668 - Unauthenticated RCE via JSON Script Runner dbgate-serve • CVE-2026-47669 - Zip Slip arbitrary file write leading to RCE •...

6AI score
Exploits1References1
Positive Technologies
Positive Technologies
added yesterday5 views

PT-2026-46912

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

9.8CVSS5.5AI score0.0005EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/02 2:34 p.m.4 views

Security Bulletin: Common Vulnerability fixed in latest releases of Cloudera Data Platform Private Cloud Base

Summary Common Vulnerability fixed in latest releases of Cloudera Data Platform Private Cloud Base Vulnerability Details CVEID:CVE-2021-23337 DESCRIPTION: Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. CWE:CWE-94: Improper Control of Generation of...

7.2CVSS6AI score0.04314EPSS
Exploits2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-27046

Malware in sbrugna...

6.7CVSS6.5AI score0.00092EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-32523

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00655EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-2163

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00318EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/09/30 8:16 p.m.2 views

CVE-2025-59940

mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8. Mitigation Mitigation for this issue is either not available or the...

6.5CVSS6.3AI score0.00126EPSS
Exploits0References7
NVD
NVD
added 2025/09/29 11:15 p.m.1 views

CVE-2025-59940

mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8...

6.5CVSS0.00126EPSS
Exploits0References4
CVE
CVE
added 2025/09/29 10:27 p.m.11 views

CVE-2025-59940

mkdocs-include-markdown-plugin (MkDocs) is affected in versions 7.1.7 and earlier due to unvalidated input colliding with substitution placeholders. The issue is resolved in version 7.1.8. Fedora advisories reference the same CVE-2025-59940 remediation. Impact details in the provided documents in...

6.5CVSS6.3AI score0.00126EPSS
Exploits0References4
Snyk
Snyk
added 2025/09/29 4:29 p.m.1 views

Improper Neutralization of Escape Characters

Overview mkdocs-include-markdown-plugin is a Mkdocs Markdown includer plugin. Affected versions of this package are vulnerable to Improper Neutralization of Escape Characters in the placeholder substitution process. An attacker can cause unintended modifications to output or disrupt application...

6.9CVSS6.8AI score0.00126EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 11:20 p.m.2 views

CVE-2022-38843

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server...

8.8CVSS8.8AI score0.00435EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:17 a.m.8 views

CVE-2019-6656

BIG-IP APM Edge Client before version 7.1.8 7180.2019.508.705 logs the full apm session ID in the log files. Vulnerable versions of the client are bundled with BIG-IP APM versions 15.0.0-15.0.1, 14,1.0-14.1.0.6, 14.0.0-14.0.0.4, 13.0.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5. In BIG-IP APM...

7.5CVSS6.9AI score0.00537EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/05/02 1:52 p.m.5 views

WordPress Nomupay Payment Processing Gateway plugin <= 7.1.7 - Arbitrary File Download Vulnerability

Arbitrary File Download Vulnerability discovered by astra.r3verii in WordPress Plugin Nomupay Payment Processing Gateway versions = 7.1.7...

4.9CVSS8.7AI score0.00456EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/11/27 12:0 a.m.28 views

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 (RHSA-2024:10208)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10208 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

10CVSS7.7AI score0.70144EPSS
Exploits14References31
RedHat Linux
RedHat Linux
added 2024/11/25 12:12 a.m.24 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

10CVSS7.2AI score0.70144EPSS
Exploits14References16
OSV
OSV
added 2024/05/02 5:15 p.m.1 views

CVE-2024-3957

The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and including, 7.1.8. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on what other plugins are installed and what...

7.3CVSS6.1AI score0.00655EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.3 views

WordPress plugin Booster for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.3CVSS7AI score0.00655EPSS
Exploits0References4
OSV
OSV
added 2024/03/06 10:52 a.m.13 views

BIT-ESPOCRM-2022-38843

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server...

8.8CVSS8.9AI score0.00435EPSS
Exploits1References1
Rows per page
Query Builder