Lucene search
+L

10621 matches found

Patchstack
Patchstack
added 2026/03/03 12:40 p.m.15 views

WordPress FormGent plugin <= 1.5.5 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Aiden in WordPress Plugin FormGent versions = 1.5.5...

8.6CVSS5.8AI score0.00385EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2026/03/03 12:00 a.m.17 views

WiseCleaner Wise Force Deleter 安全漏洞

WiseCleaner Wise Force Deleter is a file deletion tool developed by the WiseCleaner company. Versions of WiseCleaner Wise Force Deleter prior to 7.3.2 contained security vulnerabilities. These vulnerabilities stemmed from defects in the WiseDelfile64.sys component, which could allow attackers to...

7.1CVSS5.8AI score0.00204EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/03 12:00 a.m.7 views

CVE-2025-66680

An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request...

7.1CVSS6AI score0.00204EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/03/03 12:00 a.m.16 views

EUVD-2025-208237

An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request...

6AI score0.00204EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/03/03 12:00 a.m.43 views

CVE-2025-66680

An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request...

0.00204EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/03/03 12:00 a.m.8 views

CVE-2025-66680

An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request...

6AI score0.00204EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/03 12:00 a.m.29 views

CVE-2025-66680

CVE-2025-66680 concerns WiseCleaner Wise Force Deleter prior to 7.3.2, due to a flaw in the WiseDelfile64.sys driver that can allow an attacker to delete arbitrary files via a crafted request. Documents consistently name WiseDelfile64.sys as the vulnerable component and Wise Force Deleter 7.3.2 a...

7.1CVSS6AI score0.00204EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/03 12:00 a.m.31 views

PT-2026-22747

An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request...

6AI score0.00204EPSS
SaveExploits1References3
NVD
NVD
added 2026/03/02 7:16 p.m.13 views

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

9.1CVSS0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/02 6:42 p.m.4 views

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

6.1AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/02 6:42 p.m.32 views

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

0.00263EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/02 6:42 p.m.5 views

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

9.1CVSS6.1AI score0.00263EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/03/02 6:42 p.m.32 views

CVE-2025-48609

CVE-2025-48609 involves a path traversal issue in MmsProvider.java across Google Android components that can allow arbitrary file deletion and impact telephony, SMS, and MMS features. The vulnerability can cause a local denial of service without extra privileges or user interaction, as reported b...

9.1CVSS6.1AI score0.00263EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/03/02 6:42 p.m.14 views

EUVD-2025-208209

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

6.1AI score0.00263EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/02 12:00 a.m.14 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that is caused due to a path traversal error in multiple functions of MmsProvider.java resulting in a possible way of arbitrarily deleting files affecting phone...

9.1CVSS5.8AI score0.00263EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/01 12:00 a.m.14 views

ASB-A-414388731

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

9.1CVSS6.1AI score0.00263EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/26 10:35 p.m.13 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

9.1CVSS5.4AI score0.00332EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/25 3:31 p.m.10 views

EUVD-2026-8636

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

5.9CVSS5.4AI score0.00332EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/25 1:16 p.m.12 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

9.1CVSS0.00332EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/25 12:22 p.m.7 views

CVE-2026-0704

In affected version of Octopus Deploy it was possible to remove files and/or contents of files on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows...

9.1CVSS5.4AI score0.00332EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder