Lucene search
K

15 matches found

Cvelist
Cvelist
added 2026/02/20 3:46 p.m.24 views

CVE-2025-68501 WordPress Mollie Payments for WooCommerce plugin <= 8.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce allows Reflected XSS.This issue affects Mollie Payments for WooCommerce: from n/a through = 8.1.1...

7.1CVSS0.0018EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/11/05 5:15 p.m.3 views

CVE-2025-46366

Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confidential information...

6.7CVSS5.8AI score0.00115EPSS
Exploits0References2
NVD
NVD
added 2025/11/05 5:15 p.m.4 views

CVE-2025-46364

Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...

9.1CVSS0.00273EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/11/05 5:15 p.m.2 views

CVE-2025-46364

Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...

9.1CVSS5.8AI score0.00273EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/05 12:0 a.m.3 views

Dell CloudLink 命令注入漏洞

Dell CloudLink is a data encryption and key management system from Dell USA. A command injection vulnerability exists in Dell CloudLink, which can be exploited by an attacker to execute arbitrary commands on the system...

6.7CVSS7.9AI score0.00352EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/05 12:0 a.m.7 views

PT-2025-45138

Name of the Vulnerable Software and Affected Versions Dell CloudLink versions prior to 8.1.1 Description Dell CloudLink, versions prior to 8.1.1, contains a Command Injection issue that an authenticated attacker can exploit to execute arbitrary commands on the system. Recommendations Update Dell...

6.7CVSS7.5AI score0.00352EPSS
Exploits0References4
OSV
OSV
added 2025/10/16 9:12 a.m.3 views

BIT-KEYDB-2025-49112

setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-size - prev-used...

3.1CVSS7AI score0.00199EPSS
Exploits0References4
Microsoft CVE
Microsoft CVE
added 2025/07/11 7:0 a.m.2 views

setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow

...

3.1CVSS7AI score0.00199EPSS
Exploits0
OSV
OSV
added 2024/10/29 9:15 p.m.5 views

CVE-2024-50456

Missing Authorization vulnerability in The SEO Guys at SEOPress SEOPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through 8.1.1...

8.8CVSS5.8AI score0.00291EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.5 views

PrestaShop 路径遍历漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A path traversal vulnerability exists in PrestaShop versions prior to 8.1.1, which...

8.6CVSS6.7AI score0.00632EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.6 views

PrestaShop Path Traversal Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A path traversal vulnerability exists in PrestaShop versions prior to 8.1.1, which stems from the presence o...

9.1CVSS6.8AI score0.00723EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/06/01 12:0 a.m.4 views

PT-2023-23981 · Splunk · Splunk App For Stream +1

Name of the Vulnerable Software and Affected Versions: Splunk App for Stream versions prior to 8.1.1 Description: A low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise...

9.9CVSS7.5AI score0.00325EPSS
Exploits0References4
OSV
OSV
added 2021/06/29 12:15 p.m.1 views

UBUNTU-CVE-2021-32565

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1...

7.5CVSS7.1AI score0.02137EPSS
Exploits0References6
OSV
OSV
added 2019/05/22 6:29 p.m.4 views

CVE-2019-3402

The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter...

6.1CVSS6AI score0.08947EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2015/01/21 6:59 p.m.3 views

CVE-2015-0388

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0417...

4CVSS5.5AI score0.01137EPSS
Exploits0References5
Rows per page
Query Builder