Lucene search
+L

3629 matches found

NVD
NVD
•added 2025/10/18 6:15 a.m.•13 views

CVE-2025-11738

The Media Library Assistant plugin for WordPress is vulnerable to limited file reading in all versions up to, and including, 3.29 via the mla-stream-image.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary ai/eps/pdf/ps files on the server, which can...

5.3CVSS0.00411EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/10/18 4:45 a.m.•15 views

CVE-2025-11898

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS6AI score0.00825EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/18 12:00 a.m.•3 views

PT-2025-42689

Name of the Vulnerable Software and Affected Versions Media Library Assistant plugin for WordPress versions prior to 3.30 Description The Media Library Assistant plugin for WordPress is susceptible to limited file reading through the mla-stream-image.php file. This allows unauthenticated attacker...

5.3CVSS5.9AI score0.00411EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/18 12:00 a.m.•5 views

CVE-2025-11738: External Control of File Name or Path

The Media Library Assistant plugin for WordPress is vulnerable to limited file reading in all versions up to, and including, 3.29 via the mla-stream-image.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary ai/eps/pdf/ps files on the server, which can...

5.3CVSS5.9AI score0.00411EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/17 4:16 a.m.•14 views

CVE-2025-11898

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS0.00825EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/17 3:41 a.m.•14 views

EUVD-2025-34860

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS6AI score0.00825EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/17 3:41 a.m.•7 views

CVE-2025-11898 Flowring Technology|Agentflow - Arbitrary File Reading through Path Traversal

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS6AI score0.00825EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/17 3:41 a.m.•32 views

CVE-2025-11898 Flowring Technology|Agentflow - Arbitrary File Reading through Path Traversal

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS0.00825EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/17 3:41 a.m.•27 views

CVE-2025-11898

Flowring’s Agentflow is affected by CVE-2025-11898, an Arbitrary File Reading vulnerability exposed via Relative Path Traversal. Unauthenticated remote attackers can download arbitrary system files, highlighting a high confidentiality impact and network-based, low-complexity exploitation (no user...

8.7CVSS6AI score0.00825EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/17 12:00 a.m.•5 views

PT-2025-42576

Name of the Vulnerable Software and Affected Versions Agentflow affected versions not specified Description An Arbitrary File Reading issue exists in Agentflow, a product developed by Flowring. This is due to a Relative Path Traversal, which allows unauthenticated remote attackers to download...

8.7CVSS6AI score0.00825EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/17 12:00 a.m.•3 views

CVE-2025-11898: Relative Path Traversal

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS6AI score0.00825EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/16 5:56 p.m.•38 views

CVE-2025-34517

Ilevia EVE X1 Server firmware

8.7CVSS5.9AI score0.00657EPSS
SaveExploits3References3Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2007-2651

Malware in sbrugna...

5CVSS6.4AI score0.06825EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-1999-0915

Malware in sbrugna...

5CVSS6.4AI score0.06789EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2000-0964

Malware in sbrugna...

5CVSS6.4AI score0.08604EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2008-0169

Malware in sbrugna...

5CVSS6.4AI score0.01289EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2008-4744

Malware in sbrugna...

5CVSS6.4AI score0.16505EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2001-0231

Malware in sbrugna...

5CVSS6.4AI score0.05558EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2002-1450

Malware in sbrugna...

5CVSS6.1AI score0.01907EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2001-0449

Malware in sbrugna...

5CVSS6.4AI score0.01868EPSS
SaveExploits0References4
Rows per page
Query Builder