Lucene search
+L

4048 matches found

CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•13 views

SAMSUNG S Assistant 安全漏洞

SAMSUNG S Assistant is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a cell phone management function. A security vulnerability exists in SAMSUNG S Assistant prior to version 9.3.2, which stems from insufficient validation of intent by...

5.1CVSS6.2AI score0.00111EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•12 views

SAMSUNG S Assistant 安全漏洞

SAMSUNG S Assistant is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a cell phone management function. A security vulnerability exists in SAMSUNG S Assistant prior to version 9.3.2, which stems from insufficient validation of intent by...

5.1CVSS6.2AI score0.00111EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•13 views

SAMSUNG S Assistant 安全漏洞

SAMSUNG S Assistant is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a cell phone management function. A security vulnerability exists in SAMSUNG S Assistant prior to version 9.3.2, which stems from insufficient validation of intent by...

5.1CVSS6.2AI score0.00111EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•0 views

CVE-2025-21040: Undefined Security Weakness

Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information...

5.1CVSS5.8AI score0.00111EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/02 9:39 a.m.•12 views

Security Bulletin: Vulnerability in snowflake-jdbc affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary IBM watsonx Orchestrate with watsonx Assistant Cartridge contains a vulnerable version of snowflake-jdbc Vulnerability Details CVEID:CVE-2025-24789 DESCRIPTION: Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake...

7.8CVSS8AI score0.00257EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/08/28 7:30 a.m.•6 views

MAL-2025-41575 Malicious code in intel-ai-assistant-ai (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/28 12:50 a.m.•10 views

Security Bulletin: Vulnerability affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficientl...

9.4CVSS9.4AI score0.01769EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/28 12:44 a.m.•24 views

Security Bulletin: Vulnerability affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficientl...

9.4CVSS9.4AI score0.01769EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/27 10:18 p.m.•8 views

Security Bulletin: Vulnerability in Netty affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in Netty has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-24970 DESCRIPTION: Netty, an...

7.5CVSS7AI score0.02192EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/21 4:35 a.m.•25 views

CVE-2025-8357

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file deletion in the /wp-content/uploads directory due to insufficient file path validation and user capability checking in the processmladownloadfile function in all versions up to, and including, 3.27. This makes it...

4.3CVSS7AI score0.00324EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/19 5:15 a.m.•34 views

CVE-2025-8357

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file deletion in the /wp-content/uploads directory due to insufficient file path validation and user capability checking in the processmladownloadfile function in all versions up to, and including, 3.27. This makes it...

4.3CVSS0.00324EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/08/19 4:26 a.m.•9 views

CVE-2025-8357 Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file deletion in the /wp-content/uploads directory due to insufficient file path validation and user capability checking in the processmladownloadfile function in all versions up to, and including, 3.27. This makes it...

4.3CVSS6.9AI score0.00324EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/08/19 4:26 a.m.•22 views

CVE-2025-8357 Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file deletion in the /wp-content/uploads directory due to insufficient file path validation and user capability checking in the processmladownloadfile function in all versions up to, and including, 3.27. This makes it...

4.3CVSS0.00324EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/19 4:26 a.m.•38 views

CVE-2025-8357

The CVE-2025-8357 entry concerns the WordPress plugin Media Library Assistant. It describes a vulnerability in versions up to 3.27 where insufficient file path validation and inadequate user-capability checks in the _process_mla_download_file function allow authenticated users with Author-level a...

4.3CVSS6.3AI score0.00324EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•14 views

WordPress plugin Media Library Assistant 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.7AI score0.00324EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•0 views

CVE-2025-8357: Missing Authorization

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file deletion in the /wp-content/uploads directory due to insufficient file path validation and user capability checking in the processmladownloadfile function in all versions up to, and including, 3.27. This makes it...

4.3CVSS5.8AI score0.00324EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•21 views

PT-2025-33707 · WordPress · Media Library Assistant

Name of the Vulnerable Software and Affected Versions: Media Library Assistant plugin for WordPress versions up to and including 3.27 Description: The Media Library Assistant plugin for WordPress is susceptible to arbitrary file deletion within the /wp-content/uploads directory. This is due to...

4.3CVSS7.3AI score0.00324EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2025/08/18 9:33 p.m.•20 views

WordPress Media Library Assistant plugin <= 3.27 - Authenticated (Author+) Limited File Deletion vulnerability

Authenticated Author+ Limited File Deletion vulnerability discovered by wesley wcraft in WordPress Plugin Media LIbrary Assistant versions = 3.27...

4.3CVSS5.3AI score0.00324EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/17 8:29 a.m.•27 views

CVE-2025-7641

The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the /wp-json/nextgenassistant/v1.0.0/control REST endpoint in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated...

7.5CVSS7.2AI score0.00531EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/15 9:15 a.m.•26 views

CVE-2025-7641

The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the /wp-json/nextgenassistant/v1.0.0/control REST endpoint in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated...

7.5CVSS0.00531EPSS
SaveExploits0References3
Rows per page
Query Builder