Lucene search
K

157 matches found

Snyk
Snyk
added 2026/05/05 9:16 p.m.5 views

External Control of File Name or Path

Overview changedetection.io is a Website change detection and monitoring service Affected versions of this package are vulnerable to External Control of File Name or Path through the backup restoration. An attacker can access arbitrary local files by supplying a crafted backup archive containing ...

8.7CVSS5.9AI score0.00037EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/13 5:4 a.m.0 views

CVE-2026-21012

External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege...

6.8CVSS5.8AI score0.00017EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/13 5:4 a.m.24 views

CVE-2026-21012

External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege...

6.8CVSS0.00017EPSS
Exploits0References1
CVE
CVE
added 2026/04/13 5:4 a.m.7 views

CVE-2026-21012

CVE-2026-21012 describes external control of a file name in AODManager prior to SMR Apr-2026 Release 1. This allows a privileged local attacker to create a file with system privileges. The connected documents reiterate the same description; no additional technical details (affected versions, spec...

6.8CVSS5.8AI score0.00017EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2026/04/13 12:0 a.m.2 views

SAMSUNG Mobile devices 安全漏洞

Samsung Mobile devices are a series of mobile devices produced by Samsung Electronics in South Korea. These devices include smartphones, tablets, etc. There are security vulnerabilities in Samsung Mobile devices, which stem from improper external control of file names. This vulnerability could...

6.8CVSS5.8AI score0.00017EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.1 views

PT-2026-32270

External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege...

6.8CVSS5.8AI score0.00017EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.6 views

WordPress plugin Emphires 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.5CVSS5.8AI score0.00147EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.4 views

WordPress plugin OrganicFood 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.5CVSS5.8AI score0.00147EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:0 p.m.3 views

CVE-2026-24287

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00098EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

WordPress plugin The Aisle Core 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

WordPress plugin Belfort 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

WordPress plugin Deston 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00056EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

WordPress plugin Greenville 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
NVD
NVD
added 2026/03/11 3:16 p.m.0 views

CVE-2026-30903

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access...

9.8CVSS0.00103EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/11 2:52 p.m.2 views

CVE-2026-30903

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access...

9.6CVSS5.8AI score0.00103EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.3 views

EUVD-2026-10606

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00098EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.2 views

WordPress plugin Maxify 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.3 views

WordPress plugin Miller 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.3 views

WordPress plugin CloudMe 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.4 views

WordPress plugin Playa 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
Rows per page
Query Builder