Lucene search
K

19 matches found

Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.2 views

Adobe Experience Manager (AEM) CRX Content Explorer

This plugin detects the presence of the Adobe Experience Manager AEM CRX Content Explorer interface. The CRX Content Explorer is a web-based interface used to manage and interact with the content repository of Adobe Experience Manager. No source data...

6.8AI score
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-28429

Malicious code in bioql PyPI...

10CVSS8.8AI score0.94461EPSS
Exploits54References3
RedhatCVE
RedhatCVE
added 2025/08/21 12:26 a.m.3 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

6.5CVSS8AI score0.00168EPSS
Exploits53References1
NVD
NVD
added 2025/08/19 8:15 p.m.6 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

6.5CVSS0.00168EPSS
Exploits53References3
CVE
CVE
added 2025/08/19 12:0 a.m.16 views

CVE-2025-52337

CVE-2025-52337 affects LogicData eCommerce Framework v5.0.9.7000. The vulnerability is an authenticated arbitrary file upload in the Content Explorer feature, which could allow an attacker to execute arbitrary code on the server. CNNVD corroborates that the issue originates from this authenticate...

6.5CVSS9.6AI score0.00168EPSS
Exploits53References3
Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.7 views

PT-2025-33851 · Logicdata · Logicdata Ecommerce Framework

Name of the Vulnerable Software and Affected Versions: LogicData eCommerce Framework version 5.0.9.7000 Description: An authenticated arbitrary file upload issue exists in the Content Explorer feature. This allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: A...

10CVSS7.7AI score0.94461EPSS
Exploits54References5
Cvelist
Cvelist
added 2025/08/19 12:0 a.m.8 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

0.00168EPSS
Exploits53References3
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.5 views

LogicData eCommerce Framework 安全漏洞

LogicData eCommerce Framework is an eCommerce middleware from LogicData Corporation. A security vulnerability exists in LogicData eCommerce Framework version v5.0.9.7000, which originates from an authenticated, arbitrary file upload in the Content Explorer feature and could lead to the execution ...

6.5CVSS9AI score0.00168EPSS
Exploits53References4
Vulnrichment
Vulnrichment
added 2025/08/19 12:0 a.m.6 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

7.8AI score0.00168EPSS
Exploits53References3
OSV
OSV
added 2018/09/28 8:29 p.m.2 views

CVE-2018-9078

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

8.8CVSS5.9AI score0.00446EPSS
Exploits0References1
NVD
NVD
added 2018/09/28 8:29 p.m.10 views

CVE-2018-9078

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

8.8CVSS8.6AI score0.00446EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2018/09/28 8:29 p.m.1 views

CVE-2018-9074

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.8CVSS5.5AI score0.00343EPSS
Exploits0References2Affected Software3
Prion
Prion
added 2018/09/28 8:29 p.m.9 views

Path traversal

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.8CVSS6.5AI score0.00343EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/09/28 8:29 p.m.1 views

CVE-2018-9078

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

8.8CVSS5.8AI score0.00446EPSS
Exploits0References2Affected Software3
NVD
NVD
added 2018/09/28 8:29 p.m.6 views

CVE-2018-9074

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.8CVSS6.5AI score0.00343EPSS
Exploits0References1
OSV
OSV
added 2018/09/28 8:29 p.m.2 views

CVE-2018-9074

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.5CVSS5.8AI score0.00343EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/09/28 8:0 p.m.13 views

CVE-2018-9074 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.5AI score0.00343EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/09/28 8:0 p.m.16 views

CVE-2018-9078 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

8.6AI score0.00446EPSS
Exploits0References1
CVE
CVE
added 2018/09/28 8:0 p.m.43 views

CVE-2018-9078

CVE-2018-9078 affects Iomega/LenovoEMC NAS devices (Content Explorer) up to firmware 4.1.402.34662. The Web UI allowed uploading SVGs and served them from the device origin, enabling SVGs containing JavaScript that executes when downloaded by a victim, effectively enabling an in-browser XSS. Affe...

8.8CVSS8.1AI score0.00446EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder