Lucene search
+L

136 matches found

NVD
NVD
added 2026/03/05 6:16 a.m.9 views

CVE-2026-28020

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through = 1.11...

8.1CVSS0.00403EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/05 5:54 a.m.40 views

CVE-2026-28020 WordPress Chroma theme <= 1.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through = 1.11...

8.1CVSS0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:54 a.m.4 views

CVE-2026-28020 WordPress Chroma theme <= 1.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through = 1.11...

8.1CVSS5.8AI score0.00403EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:54 a.m.5 views

CVE-2026-28020

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through = 1.11...

5.9AI score0.00403EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/05 5:54 a.m.20 views

CVE-2026-28020

CVE-2026-28020 is a Local File Inclusion in the WordPress Chroma theme (ThemeREX Chroma)

8.1CVSS5.9AI score0.00403EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.14 views

WordPress plugin Chroma 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.1CVSS5.8AI score0.00403EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.8 views

PT-2026-23302

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through = 1.11...

5.9AI score0.00403EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/03/02 11:32 a.m.14 views

WordPress Chroma theme <= 1.11 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Chroma versions = 1.11...

8.1CVSS5.9AI score0.00403EPSS
SaveExploits0Affected Software1
Snyk
Snyk
added 2026/02/24 3:37 p.m.5 views

Division by zero

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6AI score0.00385EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:44 a.m.7 views

Buffer Access with Incorrect Length Value

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.7AI score0.00461EPSS
SaveExploits0References2
Fedora
Fedora
added 2025/12/30 1:14 a.m.8 views

[SECURITY] Fedora 42 Update: golang-github-alecthomas-chroma-2-2.14.0-4.fc42

A general purpose syntax highlighter in pure Go...

5.3CVSS7AI score0.00518EPSS
SaveExploits0
Fedora
Fedora
added 2025/12/30 12:38 a.m.16 views

[SECURITY] Fedora 43 Update: golang-github-alecthomas-chroma-2-2.14.0-6.fc43

A general purpose syntax highlighter in pure Go...

5.3CVSS7AI score0.00518EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2025/12/30 12:00 a.m.7 views

Fedora: Security Advisory (FEDORA-2025-cfdd59f20f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.00518EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2025/12/30 12:00 a.m.8 views

Fedora: Security Advisory (FEDORA-2025-570618af7e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.00518EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:00 a.m.6 views

Fedora 42 : golang-github-alecthomas-chroma-2 (2025-570618af7e)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-570618af7e advisory. Rebuilt for CVE-2025-58185 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

5.3CVSS7.7AI score0.00518EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/29 12:00 a.m.6 views

Fedora 43 : golang-github-alecthomas-chroma-2 (2025-cfdd59f20f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cfdd59f20f advisory. Rebuilt for CVE-2025-58185 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

5.3CVSS7.8AI score0.00518EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/29 9:30 p.m.13 views

EUVD-2025-36710

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS6.9AI score0.0018EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/29 8:15 p.m.13 views

CVE-2025-9871

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS6.2AI score0.0018EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/29 8:15 p.m.20 views

CVE-2025-9871

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS0.0018EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 7:33 p.m.8 views

CVE-2025-9871 Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS7.1AI score0.0018EPSS
SaveExploits0References1
Rows per page
Query Builder