Lucene search
K

35 matches found

Circl
Circl
added 2026/05/04 11:16 p.m.5 views

CVE-2026-7780

creationtimestamp| type| source ---|---|--- 2026-05-04 23:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2sjl3hup2h...

5.3CVSS5.8AI score0.00044EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7780

Malware in sbrugna...

9.8CVSS9.2AI score0.00933EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/09/30 12:0 a.m.3 views

Ubuntu: Security Advisory (USN-7780-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.00354EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/07/26 9:35 a.m.5 views

CVE-2025-7780

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling getaudio. This makes it possible for authenticated attackers, with Subscriber-level acces...

6.5CVSS6.8AI score0.00274EPSS
Exploits0References1
NVD
NVD
added 2025/07/24 10:15 a.m.1 views

CVE-2025-7780

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling getaudio. This makes it possible for authenticated attackers, with Subscriber-level acces...

6.5CVSS0.00274EPSS
Exploits0References5
Circl
Circl
added 2025/07/24 9:38 a.m.0 views

CVE-2025-7780

creationtimestamp| type| source ---|---|--- 2025-07-24 09:38:25+00:00| seen| Telegram/n2X3BjsuuTA1kKBHKflXMps4Ewm2yQcfNlMJXB5UJM21GTM...

6.5CVSS4.8AI score0.00274EPSS
Exploits0
Cvelist
Cvelist
added 2025/07/24 9:22 a.m.7 views

CVE-2025-7780 AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling getaudio. This makes it possible for authenticated attackers, with Subscriber-level acces...

6.5CVSS0.00274EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/07/23 9:28 p.m.5 views

WordPress Ai Engine plugin <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions vulnerability

Missing URL Scheme Validation to Authenticated Subscriber+ Arbitrary File Read via simpleTranscribeAudio and getaudio Functions vulnerability discovered by ISMAILSHADOW in WordPress Plugin AI Engine versions = 2.9.4...

6.5CVSS6.7AI score0.00274EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2024/08/20 7:5 a.m.0 views

CVE-2024-7780

creationtimestamp| type| source ---|---|--- 2024-08-20 07:05:34+00:00| seen| https://t.me/cvedetector/3595...

7.2CVSS4.8AI score0.00677EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2022/02/09 11:6 p.m.1 views

com.softwaremill.akka-http-session:jwt_2.13 (=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.13 (=0.5.10)

com.softwaremill.akka-http-session:core2.13 MAVEN version =0.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.softwaremill.akka-http-session:core2.13 and may be impacted: - com.softwaremill.akka-http-session:jwt2.13 =0.5.10 Source cves:...

8.8CVSS7.2AI score0.00365EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/02/09 11:6 p.m.0 views

com.codacy:codacy-seed-client-akka-http_2.12 (>=1.1.0-master.51.7b7549c_akka25Circe08 <=1.2.0_akka25Circe08), com.softwaremill.akka-http-session:jwt_2.12 (>=0.3.0 <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.12 (>=0.3.0 <=0.5.10)

com.softwaremill.akka-http-session:core2.12 MAVEN version =0.3.0, =1.1.0-master.51.7b7549cakka25Circe08, =0.3.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: OSV:GHSA-Q42Q-523G-3FWV...

8.8CVSS7.2AI score0.00365EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/11/08 12:0 a.m.24 views

Mozilla Firefox Security Advisory (MFSA2017-18) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

10CVSS7.6AI score0.0852EPSS
Exploits25References31
Circl
Circl
added 2020/11/27 8:50 p.m.0 views

CVE-2020-7780

creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:08+00:00| seen| https://t.me/cibsecurity/16890 2020-12-09 07:31:54+00:00| seen| https://t.me/cibsecurity/17435...

8.8CVSS8.1AI score0.00365EPSS
Exploits0References2
NVD
NVD
added 2020/11/27 5:15 p.m.11 views

CVE-2020-7780

This affects the package com.softwaremill.akka-http-session:core2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection...

8.8CVSS6.9AI score0.00365EPSS
Exploits0References6
OSV
OSV
added 2020/11/27 5:15 p.m.14 views

CVE-2020-7780

This affects the package com.softwaremill.akka-http-session:core2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection...

8.8CVSS6.8AI score
Exploits0References6
CVE
CVE
added 2020/11/27 4:40 p.m.91 views

CVE-2020-7780

CVE-2020-7780 affects the akka-http-session core artifacts: core_2.13, core_2.12, and core_2.11 up to version 0.5.11. The underlying issue is a CSRF protection bypass where endpoints protected by randomTokenCsrfProtection can be reached with an empty X-XSRF-TOKEN header and an empty XSRF-TOKEN co...

8.8CVSS7.3AI score0.00365EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2020/11/27 4:40 p.m.11 views

CVE-2020-7780 Cross-site Request Forgery (CSRF)

This affects the package com.softwaremill.akka-http-session:core2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection...

6.3CVSS8.7AI score0.00365EPSS
Exploits0References6
vulnersOsv
vulnersOsv
added 2020/03/10 4:51 p.m.2 views

com.codacy:codacy-seed-client-akka-http_2.12 (>=1.1.0-master.51.7b7549c_akka25Circe08 <=1.2.0_akka25Circe08), com.softwaremill.akka-http-session:jwt_2.12 (>=0.3.0 <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.12 (>=0.3.0 <=0.5.10)

com.softwaremill.akka-http-session:core2.12 MAVEN version =0.3.0, =1.1.0-master.51.7b7549cakka25Circe08, =0.3.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046654...

8.8CVSS7.2AI score0.00365EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2020/03/10 4:51 p.m.0 views

com.softwaremill.akka-http-session:jwt_2.13 (=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.13 (=0.5.10)

com.softwaremill.akka-http-session:core2.13 MAVEN version =0.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.softwaremill.akka-http-session:core2.13 and may be impacted: - com.softwaremill.akka-http-session:jwt2.13 =0.5.10 Source cves:...

8.8CVSS7.2AI score0.00365EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2020/03/10 4:51 p.m.3 views

com.codacy:codacy-seed-client-akka-http_2.11 (>=1.1.0-master.51.7b7549c_akka25Circe08 <=1.2.0_akka25Circe08), com.softwaremill.akka-http-session:jwt_2.11 (>=0.2.0 <=0.5.10) potentially affected by CVE-2020-7780 via com.softwaremill.akka-http-session:core_2.11 (>=0.2.0 <=0.5.10)

com.softwaremill.akka-http-session:core2.11 MAVEN version =0.2.0, =1.1.0-master.51.7b7549cakka25Circe08, =0.2.0, =0.5.10 Source cves: CVE-2020-7780 Source advisory: SNYK:JAVA-COMSOFTWAREMILLAKKAHTTPSESSION-1046655...

8.8CVSS7.2AI score0.00365EPSS
Exploits0
Rows per page
Query Builder