Lucene search
+L

4329 matches found

CNNVD
CNNVD
added 2025/05/15 12:0 a.m.5 views

WordPress plugin Payment Gateway for Telcell 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.1CVSS6.1AI score0.00464EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/05/14 12:0 a.m.6 views

Jenkins plugin Cadence vManager 跨站请求伪造漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security vulnerability...

4.3CVSS6.3AI score0.00224EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/14 12:0 a.m.7 views

Jenkins plugin WSO2 Oauth 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

9.8CVSS9.3AI score0.00616EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/05/13 8:32 p.m.10 views

CVE-2025-30315 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t...

6.1CVSS5.7AI score0.00235EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/13 6:15 p.m.5 views

CVE-2025-43555

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.00233EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/13 4:15 p.m.4 views

CVE-2025-4427

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API...

7.5CVSS5.8AI score0.99899EPSS
SaveExploits8References2
CVE
CVE
added 2025/05/09 5:12 a.m.77 views

CVE-2025-4377

Sparx Systems Pro Cloud Server is affected by CVE-2025-4377 due to an Improper Limitation of a Pathname in logview.php, enabling a Path Traversal that allows reading arbitrary files on the filesystem. The issue affects Pro Cloud Server versions earlier than 6.0.165 and is exposed via the Pro Clou...

8.3CVSS6.7AI score0.00621EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.7 views

WordPress plugin WP Pipes 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

6.5CVSS6.2AI score0.00183EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.9 views

WordPress plugin Hash Form 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6AI score0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.8 views

SysAid On-Prem 安全漏洞

SysAid On-Prem is a locally deployed IT Service Management ITSM platform from SysAid Israel. A security vulnerability exists in SysAid On-Prem versions 23.3.40 and earlier, which stems from an unvalidated XML external entity vulnerability in the Server URL handling feature that could lead to...

9.8CVSS8.9AI score0.72971EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.3 views

WordPress plugin WP Hotel Booking 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6AI score0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/02 12:0 a.m.5 views

WordPress plugin Homey 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS5.8AI score0.00212EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.6 views

ABB Automation Builder 安全漏洞

ABB Automation Builder is an integrated engineering development environment from ABB Switzerland for unified programming and configuration of ABB programmable logic controllers PLCs, motion control and robotics systems. A security vulnerability exists in ABB Automation Builder version 2.8.0 and...

8.5CVSS6.7AI score0.00135EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.7 views

ABB ANC 安全漏洞

ABB ANC ABB Adaptive Noise Cancellation is an industrial-grade adaptive noise cancellation system from ABB Switzerland for real-time cancellation of noise in specific frequency bands generated by equipment such as motors/transformers. A security vulnerability exists in ABB ANC version 1.1.4 and...

2.6CVSS6.8AI score0.00174EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/04/28 12:0 a.m.8 views

BoxBilling 4.22.1.5 Remote Code Execution

BoxBilling versions 4.22.1.5 and below remote code execution exploit that spawns a php reverse shell...

7.2CVSS8.2AI score0.44002EPSS
SaveExploits7
CNNVD
CNNVD
added 2025/04/26 12:0 a.m.5 views

WordPress plugin Jupiter X Core 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

8.1CVSS8.4AI score0.0067EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/25 12:0 a.m.5 views

Entrust Printer Manager 路径遍历漏洞

Entrust Printer Manager is a printer management program from Entrust USA. A security vulnerability exists in Entrust Printer Manager D3.18.4-3 and earlier versions that originates from directory traversal...

6.5CVSS6.7AI score0.00518EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.5 views

WordPress plugin BeerXML Shortcode 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

6.4CVSS7.2AI score0.00204EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.7 views

WordPress plugin RRSSB 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.5CVSS6.5AI score0.00252EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/04/23 2:46 a.m.6 views

SUSE CVE-2017-3468

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

3.5CVSS5.9AI score0.009EPSS
SaveExploits0References4
Rows per page
Query Builder