Lucene search
+L

4320 matches found

CNNVD
CNNVD
added 2025/10/27 12:0 a.m.5 views

Willow CMS 代码问题漏洞

Willow CMS is a content management system for mndeaves individual developers. A code issue vulnerability exists in Willow CMS version 1.4.0 and prior versions, which stems from the presence of an unrestricted upload function in the file /admin/images/add, which could lead to a remote attack...

7.2CVSS5.2AI score0.00358EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.5 views

WordPress plugin Export Categories 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is ...

5.3CVSS6.4AI score0.00274EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.13 views

PT-2025-43757

Name of the Vulnerable Software and Affected Versions dnsmasq versions up to 2.73rc6 Description A flaw exists in dnsmasq that involves a null pointer dereference within the check servers function, located in the src/network.c file of the Config File Handler component. This issue can be triggered...

4.4CVSS5.8AI score0.00012EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.5 views

WordPress plugin Slider Templates 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.9CVSS6.6AI score0.00145EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.14 views

PT-2025-43937

Name of the Vulnerable Software and Affected Versions LearnHouse versions prior to 98dfad76aad70711a8113f6c1fdabfccf10509ca Description A cross site scripting issue exists in LearnHouse. The issue is located in the Account Setting Page component, specifically within the file...

5.4CVSS5.3AI score0.00264EPSS
SaveExploits1References8
Hewlett-Packard
Hewlett-Packard
added 2025/10/27 12:0 a.m.42 views

HP ThinPro 8.1 SP8 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP8 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as part of...

9.8CVSS6.8AI score0.7439EPSS
SaveExploits155
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.6 views

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from the use of weak default...

10CVSS6.7AI score0.00276EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.7 views

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 have a security vulnerability that stems from the use of default SNMP community...

9.1CVSS9.1AI score0.00276EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.7 views

WordPress plugin Knowledge Base 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.9AI score0.00497EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.10 views

WordPress plugin taskbot 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path travers...

7.7CVSS6.6AI score0.004EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.8 views

WordPress plugin TF Woo Product Grid Addon For Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

9.8CVSS5.8AI score0.0046EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.7 views

WordPress plugin Event Tickets 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.6AI score0.00202EPSS
SaveExploits0References1
CBLMariner
CBLMariner
added 2025/10/21 9:13 p.m.9 views

CVE-2025-62168 affecting package squid for versions less than 6.13-3

CVE-2025-62168 affecting package squid for versions less than 6.13-3. A patched version of the package is available...

10CVSS6.9AI score0.62871EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2025/10/21 10:58 a.m.7 views

CVE-2025-7473 XML Injection

Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection...

5.2CVSS6.6AI score0.00317EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/10/20 2:25 a.m.9 views

thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume th...

8.8CVSS7.4AI score0.00303EPSS
SaveExploits0References6
CNVD
CNVD
added 2025/10/17 12:0 a.m.6 views

Adobe Framemaker Code Execution Vulnerability

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A security vulnerability exists in Adobe Framemaker version 2020.9, 2022.7, and prior versions, which can be...

7.8CVSS7.8AI score0.00212EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/17 12:0 a.m.11 views

Unspecified Vulnerability in Adobe Substance3D Viewer (CNVD-2025-24166)

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. A security vulnerability exists in Adobe Substance3D Viewer 0.25.2 and earlier versions, which can be exploited by an attacker to cause arbitrary code execution in the current us...

7.8CVSS7.7AI score0.00226EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/10/17 12:0 a.m.7 views

CVE-2025-60359

radare2 v5.9.8 and before contains a memory leak in the function rbinobjectnew...

5.5CVSS5.2AI score0.00155EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/10/16 5:0 p.m.12 views

CVE-2025-61789 Icinga DB Web hidden/protected custom variables are prone to filter enumeration

Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values...

5.3CVSS0.00338EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/16 10:3 a.m.13 views

CVE-2025-54859

Stored cross-site scripting XSS vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser...

4.8CVSS0.00279EPSS
SaveExploits0References2
Rows per page
Query Builder