Lucene search
+L

62 matches found

NVD
NVD
added 2026/05/21 9:16 p.m.20 views

CVE-2026-8134

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An authenticated rogue administrator with composer form editing rights can exploit this to include arbitrary readable file...

9.4CVSS0.00739EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 8:13 p.m.11 views

CVE-2026-8134

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An authenticated rogue administrator with composer form editing rights can exploit this to include arbitrary readable file...

9.4CVSS6.2AI score0.00739EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/05/21 8:13 p.m.79 views

CVE-2026-8134

Concrete CMS 9.5.0 and earlier fails to sanitize path traversal in the ptComposerFormLayoutSetControlCustomTemplate field when saving page-type composer form layouts. An authenticated rogue administrator with composer form editing rights can cause arbitrary readable files to be included on the se...

9.4CVSS6.2AI score0.00739EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-8134 Malicious code in @kollusietea/adipisci-rem-distinctio-dicta (npm)

The package @kollusietea/adipisci-rem-distinctio-dicta was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/07/25 6:15 a.m.9 views

CVE-2025-8134

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The...

8.8CVSS5.8AI score0.00427EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/07/25 6:2 a.m.21 views

CVE-2025-8134 PHPGurukul BP Monitoring Management System bwdates-report-result.php sql injection

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS0.00427EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/05/22 4:50 p.m.8 views

CVE-2020-8134

Server-side request forgery SSRF vulnerability in Ghost CMS 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems...

8.1CVSS6.6AI score0.0122EPSS
SaveExploits1References1
Circl
Circl
added 2024/08/24 11:14 p.m.12 views

CVE-2024-8134

creationtimestamp| type| source ---|---|--- 2024-08-24 23:14:12+00:00| seen| https://t.me/cvedetector/4063...

9.8CVSS6.9AI score0.07945EPSS
SaveExploits1References1
Circl
Circl
added 2024/02/04 2:41 p.m.14 views

CVE-2019-8134

creationtimestamp| type| source ---|---|--- 2024-02-04 14:41:19+00:00| seen| https://t.me/ctinow/178835...

8.8CVSS8.1AI score0.01002EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.33 views

Debian: Security Advisory (DLA-155-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.09828EPSS
SaveExploits5References3
F5 Networks
F5 Networks
added 2023/02/21 7:9 p.m.56 views

K17120: Linux kernel vulnerability CVE-2014-8134

Security Advisory Description The paravirtopssetup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirtenabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that rea...

3.3CVSS5.6AI score0.00703EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-2443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.0523EPSS
SaveExploits12References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.26 views

Ubuntu: Security Advisory (USN-2448-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.08579EPSS
SaveExploits9References3
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-2446-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.08579EPSS
SaveExploits15References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.30 views

Ubuntu: Security Advisory (USN-2447-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.08579EPSS
SaveExploits9References3
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.35 views

Ubuntu: Security Advisory (USN-2441-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.08579EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.35 views

Ubuntu: Security Advisory (USN-2445-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.08579EPSS
SaveExploits15References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.33 views

Ubuntu: Security Advisory (USN-2448-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.08579EPSS
SaveExploits17References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.28 views

Mageia: Security Advisory (MGASA-2015-0075)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.05361EPSS
SaveExploits15References12
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2015-0077)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.2AI score0.37233EPSS
SaveExploits37References39
Rows per page
Query Builder