Lucene search
+L

29713 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/05 12:00 a.m.•8 views

CVE-2020-37142: Stack-based Buffer Overflow

10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting SEH records. Attackers can craft a malicious payload targeting the 'Computer' parameter during the 'Add' function to trigg...

8.4CVSS7.2AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/05 12:00 a.m.•26 views

10-Strike Network Inventory Explorer 安全漏洞

10-Strike Network Inventory Explorer is a scanning software developed by 10-Strike Corporation. It is used to track hardware and software on network computers. Version 8.54 of 10-Strike Network Inventory Explorer contains a security vulnerability caused by improper handling of structured...

8.4CVSS6AI score0.00383EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/02/04 2:13 p.m.•230 views

Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft

Detections for the CVE-2026-21509 vulnerability in MS Office...

8.8CVSS7.4AI score0.9784EPSS
SaveExploits53
NVD
NVD
•added 2026/02/04 9:15 a.m.•30 views

CVE-2025-15487

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS0.00474EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/04 8:25 a.m.•55 views

CVE-2025-15487 Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS0.00474EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/04 8:25 a.m.•51 views

CVE-2025-15487

CVE-2025-15487 affects the WordPress Code Explorer plugin up to version 1.4.6. The root cause is a path traversal flaw exploitable via the file parameter, allowing authenticated attackers with Administrator-level access to read arbitrary server files. Impact is exposure of sensitive information; ...

4.9CVSS5.9AI score0.00474EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/04 8:25 a.m.•12 views

CVE-2025-15487 Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS5.9AI score0.00474EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/04 8:25 a.m.•20 views

EUVD-2025-206809

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS5.6AI score0.00474EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/04 8:25 a.m.•27 views

CVE-2025-15487

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS5.6AI score0.00474EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•28 views

WordPress plugin Code Explorer 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.9CVSS5.8AI score0.00474EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•28 views

PT-2026-5888

Name of the Vulnerable Software and Affected Versions WordPress Code Explorer plugin versions through 1.4.6 Description The Code Explorer plugin for WordPress has a flaw that allows authorized users with Administrator-level access or higher to read arbitrary files on the server. This is possible...

4.9CVSS5.7AI score0.00474EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•5 views

CVE-2025-15487: Improper Limitation of a Pathname to a Restricted Directory

The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...

4.9CVSS5.9AI score0.00474EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/03 11:43 p.m.•22 views

WordPress Code Explorer plugin <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter vulnerability

Authenticated Administrator+ Arbitrary File Read via 'file' Parameter vulnerability discovered by 0x34rth in WordPress Plugin Code Explorer versions = 1.4.6...

4.9CVSS5.4AI score0.00474EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/01/29 8:39 a.m.•20 views

CVE-2026-23563

Improper Link Resolution Before File Access invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is...

5.7CVSS5.9AI score0.00227EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/29 12:00 a.m.•8 views

CVE-2026-23563: Improper Link Resolution Before File Access

Improper Link Resolution Before File Access invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is...

7.1CVSS5.9AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/28 6:16 p.m.•17 views

CVE-2020-36961

10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...

9.8CVSS0.00543EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/28 5:35 p.m.•83 views

CVE-2020-36961 10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)

10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...

9.8CVSS0.00543EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/28 5:35 p.m.•12 views

CVE-2020-36961 10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH)

10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...

9.8CVSS7.2AI score0.00543EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/28 5:35 p.m.•39 views

CVE-2020-36961

CVE-2020-36961 affects 10-Strike Network Inventory Explorer 8.65. The vulnerability is a buffer overflow in exception handling that enables code execution via a crafted malicious file containing 209 bytes of padding and a specially constructed Structured Exception Handler, enabling a remote attac...

9.8CVSS7.2AI score0.00543EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•26 views

PT-2026-5153

10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...

9.8CVSS6.4AI score0.00543EPSS
SaveExploits0References4
Rows per page
Query Builder