Lucene search
+L

22 matches found

Tenable Nessus
Tenable Nessus
•added 2025/12/04 12:00 a.m.•15 views

Adobe Experience Manager (AEM) CRX Content Explorer

This plugin detects the presence of the Adobe Experience Manager AEM CRX Content Explorer interface. The CRX Content Explorer is a web-based interface used to manage and interact with the content repository of Adobe Experience Manager. No source data...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-28429

Malicious code in bioql PyPI...

10CVSS7.7AI score0.98253EPSS
SaveExploits54References3
RedhatCVE
RedhatCVE
•added 2025/08/21 12:26 a.m.•29 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

6.5CVSS8AI score0.00311EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/19 8:15 p.m.•20 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

6.5CVSS0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•1 views

CVE-2025-52337: Improper Neutralization of Special Elements used in a Command

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

6.5CVSS6.5AI score0.00311EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•21 views

PT-2025-33851 · Logicdata · Logicdata Ecommerce Framework

Name of the Vulnerable Software and Affected Versions: LogicData eCommerce Framework version 5.0.9.7000 Description: An authenticated arbitrary file upload issue exists in the Content Explorer feature. This allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: A...

10CVSS8.3AI score0.98253EPSS
SaveExploits54References5
Vulnrichment
Vulnrichment
•added 2025/08/19 12:00 a.m.•13 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

7.8AI score0.00311EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•20 views

LogicData eCommerce Framework 安全漏洞

LogicData eCommerce Framework is an eCommerce middleware from LogicData Corporation. A security vulnerability exists in LogicData eCommerce Framework version v5.0.9.7000, which originates from an authenticated, arbitrary file upload in the Content Explorer feature and could lead to the execution ...

6.5CVSS9AI score0.00311EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/08/19 12:00 a.m.•23 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file...

0.00311EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/19 12:00 a.m.•35 views

CVE-2025-52337

An authenticated arbitrary file upload vulnerability exists in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 . Attackers can exploit this flaw by uploading a crafted file to achieve arbitrary code execution . No specific remediation or newer patched version is currentl...

6.5CVSS9.6AI score0.00311EPSS
SaveExploits0References3
NVD
NVD
•added 2018/09/28 8:29 p.m.•29 views

CVE-2018-9078

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

8.8CVSS8.6AI score0.01039EPSS
SaveExploits0References1
OSV
OSV
•added 2018/09/28 8:29 p.m.•15 views

CVE-2018-9078

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

8.8CVSS5.9AI score0.01039EPSS
SaveExploits0References1
OSV
OSV
•added 2018/09/28 8:29 p.m.•13 views

CVE-2018-9074

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.5CVSS5.8AI score0.00974EPSS
SaveExploits0References1
Prion
Prion
•added 2018/09/28 8:29 p.m.•26 views

Path traversal

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.8CVSS6.5AI score0.00974EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2018/09/28 8:29 p.m.•11 views

CVE-2018-9078

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

8.8CVSS5.8AI score0.01039EPSS
SaveExploits0References2Affected Software3
attackerkb
attackerkb
•added 2018/09/28 8:29 p.m.•9 views

CVE-2018-9074

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.8CVSS5.5AI score0.00974EPSS
SaveExploits0References2Affected Software3
NVD
NVD
•added 2018/09/28 8:29 p.m.•29 views

CVE-2018-9074

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.8CVSS6.5AI score0.00974EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/09/28 8:00 p.m.•40 views

CVE-2018-9078 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

8.6AI score0.01039EPSS
SaveExploits0References1
CVE
CVE
•added 2018/09/28 8:00 p.m.•68 views

CVE-2018-9078

CVE-2018-9078 affects Iomega/LenovoEMC NAS devices (Content Explorer) up to firmware 4.1.402.34662. The Web UI allowed uploading SVGs and served them from the device origin, enabling SVGs containing JavaScript that executes when downloaded by a victim, effectively enabling an in-browser XSS. Affe...

8.8CVSS8.1AI score0.01039EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/09/28 8:00 p.m.•44 views

CVE-2018-9074 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

6.5AI score0.00974EPSS
SaveExploits0References1
Rows per page
Query Builder