Lucene search
K

87 matches found

Cvelist
Cvelist
added 2026/03/05 5:53 a.m.25 views

CVE-2026-27348 WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Photography photography allows DOM-Based XSS.This issue affects Photography: from n/a through 7.7.6...

7.1CVSS0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.2 views

WordPress plugin GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

4.3CVSS6.3AI score0.00038EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/01/05 10:33 p.m.4 views

WordPress GamiPress plugin <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Information Exposure vulnerability discovered by kr0d in WordPress Plugin GamiPress versions = 7.6.1...

4.3CVSS6.7AI score0.00038EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:0 a.m.4 views

Fortinet FortiManager Insertion of Sensitive Information Into Sent Data in csfd daemon (FG-IR-24-228)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-228 advisory. - A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiVoice 7.0.0...

4.3CVSS5.4AI score0.0001EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4124

Malware in sbrugna...

5.6CVSS5.9AI score0.00084EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-9173

Malware in sbrugna...

6.5CVSS6.5AI score0.00084EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4118

Malware in sbrugna...

5.6CVSS5.9AI score0.00115EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4123

Malware in sbrugna...

5.6CVSS5.9AI score0.00084EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-0803

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.0036EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-24457

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00053EPSS
Exploits0References1
Fedora
Fedora
added 2025/08/08 12:55 a.m.2 views

[SECURITY] Fedora 42 Update: varnish-7.6.1-6.fc42

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=E2=80=99t have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a significant speed up...

5.4CVSS6.9AI score0.0029EPSS
Exploits0
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.2 views

Rocket.Chat 安全漏洞

Rocket.Chat is a chat program from Rocket.Chat, Inc. A security vulnerability exists in Rocket.Chat versions 7.6.1 and earlier, which stems from inefficient regular expression complexity due to incorrect manipulation of the parameter line in file...

7.5CVSS4.5AI score0.00848EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/03 12:0 a.m.1 views

Unicom Focal Point 安全漏洞

Unicom Focal Point is a portfolio management and decision analysis tool from Unicom, Inc. for use by corporate and government agency product organizations. A security vulnerability exists in Unicom Focal Point version 7.6.1 that stems from stored cross-site scripting in the val parameter and...

6.1CVSS6AI score0.00182EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/06/03 12:0 a.m.1 views

PT-2025-23622 · Unicom · Unicom Focal Point

Name of the Vulnerable Software and Affected Versions: Unicom Focal Point version 7.6.1 Description: A Cross Site Scripting issue was found. The val parameter in SettingController for the "/fp/admin/settings/loginpage" endpoint and the rootserviceurl parameter in FriendsController for the...

6.1CVSS5.3AI score0.00182EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/24 12:18 a.m.17 views

CVE-2025-32814

An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur...

9.8CVSS8.2AI score0.32102EPSS
Exploits0References1
NCSC
NCSC
added 2025/05/23 8:55 a.m.3 views

Vulnerabilities fixed in Infoblox NETMRI

Infoblox has fixed vulnerabilities in NETMRI Specific for versions prior to 7.6.1. The vulnerabilities include a critical vulnerability that allows remote authenticated users to access arbitrary files with root privileges, an unauthenticated remote command injection vulnerability that allows...

9.8CVSS8.7AI score0.32102EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.2 views

Infoblox NETMRI 安全漏洞

Infoblox NETMRI is a network management product from US-based Infoblox, Inc. can automate, provide visibility and continuous insight to help organizations intelligently manage their multi-vendor networks. A security vulnerability exists in Infoblox NETMRI versions prior to 7.6.1 that originates...

9.8CVSS7.1AI score0.32102EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/22 12:0 a.m.4 views

PT-2025-22492 · Infoblox · Infoblox Netmri

Name of the Vulnerable Software and Affected Versions: Infoblox NETMRI versions prior to 7.6.1 Description: An issue was discovered in Infoblox NETMRI. Authentication bypass can occur due to a hardcoded credential. Recommendations: Update Infoblox NETMRI to version 7.6.1 or later...

6.5CVSS6.4AI score0.27565EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.1 views

PT-2025-3133 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWeb versions 6.3.17 through 7.6.1 Description: The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQL injection', which allows an attacker to gain information disclosure...

4CVSS7.3AI score0.00211EPSS
Exploits0References7
Saint
Saint
added 2024/11/15 12:0 a.m.317 views

FortiManager fgfmd remote command execution

Added: 11/15/2024 Background FortiManager is an integrated platform for the centralized management of products in a Fortinet security infrastructure. Problem Missing authentication in the fgfmd service could allow a remote attacker to execute arbitrary commands. Resolution Upgrade to FortiManager...

8.3AI score
Exploits0
Rows per page
Query Builder