Lucene search
K

25953 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/04 8:25 a.m.6 views

CVE-2025-15487

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS5.6AI score0.00421EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/04 8:25 a.m.3 views

CVE-2025-15487 Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS5.6AI score0.00421EPSS
Exploits0References2
EUVD
EUVD
added 2026/02/04 8:25 a.m.3 views

EUVD-2025-206809

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS5.6AI score0.00421EPSS
Exploits0References2
CVE
CVE
added 2026/02/04 8:25 a.m.20 views

CVE-2025-15487

CVE-2025-15487 affects the WordPress Code Explorer plugin up to version 1.4.6. The root cause is a path traversal flaw exploitable via the file parameter, allowing authenticated attackers with Administrator-level access to read arbitrary server files. Impact is exposure of sensitive information; ...

4.9CVSS5.6AI score0.00421EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.5 views

WordPress plugin Code Explorer 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.9CVSS5.8AI score0.00421EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.7 views

PT-2026-5888

Name of the Vulnerable Software and Affected Versions WordPress Code Explorer plugin versions through 1.4.6 Description The Code Explorer plugin for WordPress has a flaw that allows authorized users with Administrator-level access or higher to read arbitrary files on the server. This is possible...

4.9CVSS5.7AI score0.00421EPSS
Exploits0References6
Patchstack
Patchstack
added 2026/02/03 11:43 p.m.4 views

WordPress Code Explorer plugin <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter vulnerability

Authenticated Administrator+ Arbitrary File Read via 'file' Parameter vulnerability discovered by 0x34rth in WordPress Plugin Code Explorer versions = 1.4.6...

4.9CVSS5.4AI score0.00421EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/29 8:39 a.m.4 views

CVE-2026-23563

Improper Link Resolution Before File Access invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is...

5.7CVSS5.9AI score0.00195EPSS
Exploits0References2
NVD
NVD
added 2026/01/28 6:16 p.m.3 views

CVE-2020-36961

10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...

9.8CVSS0.00468EPSS
Exploits0References3
CVE
CVE
added 2026/01/28 5:35 p.m.9 views

CVE-2020-36961

CVE-2020-36961 affects 10-Strike Network Inventory Explorer 8.65. The vulnerability is a buffer overflow in exception handling that enables code execution via a crafted malicious file containing 209 bytes of padding and a specially constructed Structured Exception Handler, enabling a remote attac...

9.8CVSS6.4AI score0.00468EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/28 5:35 p.m.27 views

CVE-2020-36961 10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)

10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...

9.8CVSS0.00468EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/28 5:35 p.m.3 views

CVE-2020-36961 10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)

10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...

9.8CVSS6.4AI score0.00468EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.4 views

PT-2026-5153

10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...

9.8CVSS6.4AI score0.00468EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.3 views

10-Strike Network Inventory Explorer security vulnerabilities

10-Strike Network Inventory Explorer is a scanning software developed by 10-Strike Corporation. It is used to track hardware and software on network computers. Version 8.65 of 10-Strike Network Inventory Explorer contains a security vulnerability caused by buffer overflow in exception handling,...

9.8CVSS6.2AI score0.00468EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/24 3:17 a.m.4 views

CVE-2026-21524

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

7.4CVSS5.3AI score0.00504EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 11:15 p.m.3 views

CVE-2026-21524

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

7.4CVSS0.00504EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 10:47 p.m.2 views

CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability

...

7.4CVSS5.3AI score0.00504EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 10:47 p.m.4 views

CVE-2026-21524

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

7.4CVSS5.3AI score0.00504EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/22 10:47 p.m.18 views

CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability

...

7.4CVSS0.00504EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 10:47 p.m.15 views

CVE-2026-21524

CVE-2026-21524 describes an information-disclosure vulnerability in Azure Data Explorer exposed to the network. Affected component is Azure Data Explorer’s data exposure path leading to unauthorized disclosure of information. Impact is Confidentiality High with network-based access and no require...

7.4CVSS5.3AI score0.00504EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder