Lucene search
+L

16410 matches found

CNVD
CNVD
added 2025/07/21 12:00 a.m.9 views

Microsoft Input Method Editor Buffer Overflow Vulnerability

Microsoft Input Method Editor IME is a software component from Microsoft Corporation that enables users to enter text in languages that cannot be easily represented on a standard QWERTY keyboard. A security vulnerability exists in Microsoft Input Method Editor IME. An attacker could exploit the...

8.8CVSS6.7AI score0.00333EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/19 10:15 a.m.14 views

CVE-2012-10019

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote...

9.8CVSS0.02278EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
added 2025/07/19 9:23 a.m.10 views

CVE-2012-10019 Front-end Editor < 2.3 - Arbitrary File Upload

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote...

9.8CVSS8.3AI score0.02278EPSS
SaveExploits2References5
CVE
CVE
added 2025/07/19 9:23 a.m.34 views

CVE-2012-10019

The CVE-2012-10019 issue affects the Front End Editor plugin for WordPress (versions before 2.3). The vulnerability arises from missing file type validation in upload.php, allowing unauthenticated users to upload arbitrary files to the server, with potential remote code execution. Affected softwa...

9.8CVSS7.7AI score0.02278EPSS
SaveExploits2References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/19 12:00 a.m.9 views

PT-2025-30124

Name of the Vulnerable Software and Affected Versions Front End Editor plugin for WordPress versions prior to 2.3 Description The Front End Editor plugin for WordPress is susceptible to arbitrary file uploads due to missing file type validation via the upload.php file. This allows unauthenticated...

9.8CVSS7.5AI score0.02278EPSS
SaveExploits2References9
CNNVD
CNNVD
added 2025/07/19 12:00 a.m.8 views

WordPress plugin Front End Editor 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.8CVSS7.8AI score0.02278EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
added 2025/07/18 5:23 a.m.5 views

CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

4.3CVSS6.2AI score0.00233EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/07/18 5:23 a.m.18 views

CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

4.3CVSS0.00233EPSS
SaveExploits0References3
CVE
CVE
added 2025/07/18 5:23 a.m.29 views

CVE-2025-6726

CVE-2025-6726 relates to the Block Editor Gallery Slider WordPress plugin. The Wordfence/NVD entry states a missing capability check in classic_gallery_slider_options() affects all versions up to and including 1.1.1, enabling authenticated users with Subscriber-level access or higher to modify li...

4.3CVSS6.3AI score0.00233EPSS
SaveExploits0References3
Fedora
Fedora
added 2025/07/18 1:11 a.m.10 views

[SECURITY] Fedora 41 Update: vim-9.1.1552-1.fc41

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

4.1CVSS7.3AI score0.0076EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2025/07/18 12:00 a.m.9 views

PT-2025-30003 · WordPress · Block Editor Gallery Slider

Name of the Vulnerable Software and Affected Versions: Block Editor Gallery Slider plugin for WordPress versions up to and including 1.1.1 Description: The Block Editor Gallery Slider plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the...

4.3CVSS6.2AI score0.00233EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/07/18 12:00 a.m.16 views

WordPress plugin Block Editor Gallery Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS5.9AI score0.00233EPSS
SaveExploits0References3
Fedora
Fedora
added 2025/07/17 1:27 a.m.13 views

[SECURITY] Fedora 42 Update: vim-9.1.1552-1.fc42

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

4.1CVSS7.3AI score0.0076EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2025/07/17 12:00 a.m.11 views

The vulnerability of the Input Method Editor (IME) component in Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the Input Method Editor IME component in Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.4AI score0.00306EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/16 1:57 p.m.17 views

Malicious code in blocknote-editor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/07/16 1:57 p.m.10 views

MAL-2025-6074 Malicious code in blocknote-editor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/07/16 10:56 a.m.11 views

CVE-2025-7618

A stored Cross-Site Scripting XSS vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser...

4.8CVSS5.1AI score0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/16 12:00 a.m.14 views

WordPress plugin Contact Form 7 Editor Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

7.1CVSS5.7AI score0.00191EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/15 12:00 a.m.7 views

Vim 路径遍历漏洞

Vim is a cross-platform text editor from the Vim open source. A path traversal vulnerability exists in versions prior to Vim 9.1.1552, which stems from a path traversal issue in the tar.vim plugin that could lead to arbitrary file overwrites...

4.1CVSS7.5AI score0.00243EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/15 12:00 a.m.7 views

Vim 路径遍历漏洞

Vim is a cross-platform text editor from the Vim open source. A path traversal vulnerability exists in versions prior to Vim 9.1.1551, which stems from a path traversal issue in the zip.vim plugin that could lead to arbitrary file overwrites...

4.1CVSS6.8AI score0.0076EPSS
SaveExploits1References5
Rows per page
Query Builder