Lucene search
K

6 matches found

Vulnrichment
Vulnrichment
added 2026/05/14 5:30 a.m.3 views

CVE-2026-3829 WP Encryption - One Click SSL & Force HTTPS <= 7.8.5.10 - Missing Authorization to Authenticated (Subscriber+) SSL Setup Tampering

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'wplebasicgetrequests' function in all versions up to, and including, 7.8.5.10. This makes...

5.4CVSS5.8AI score0.00022EPSS
Exploits0References3
NVD
NVD
added 2026/04/24 3:16 a.m.0 views

CVE-2026-41305

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape sequences when stringifying CSS ASTs. When user-submitted CSS is parsed and re-stringified for embedding in HTML tags, in CSS...

6.1CVSS0.00011EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/24 2:27 a.m.4 views

EUVD-2026-25383

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape sequences when stringifying CSS ASTs. When user-submitted CSS is parsed and re-stringified for embedding in HTML tags, in CSS...

6.1CVSS5.2AI score0.00011EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/11/14 12:0 a.m.2 views

PortlandLabs Concrete CMS 授权问题漏洞

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A security vulnerability exists in Concrete CMS concrete5 versions prior to 8.5.10 and versions 9.0.0 through 9.1.2, which stems from a new session ID not being issued...

5.4CVSS5.7AI score0.0031EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.4 views

PT-2022-27002 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS formerly concrete5 versions 9.0.0 through 9.1.2 Concrete CMS formerly concrete5 versions prior to 8.5.10 Description: The issue allows the authTypeConcreteCookieMap table to be filled up, causing a denial of service due to high...

6.5CVSS7.2AI score0.00797EPSS
Exploits0References14
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.3 views

Atlassian Jira 信息泄露漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability in Atlassian Jira Server and Data Center versions prior to 8.5.10 and versions 8.6.0 through 8.13.1...

5.3CVSS5.8AI score0.00284EPSS
Exploits0References2
Rows per page
Query Builder