Lucene search
K

8812 matches found

CNNVD
CNNVD
added 2025/08/28 12:0 a.m.1 views

WordPress plugin Neresa 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS6.5AI score0.00393EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.2 views

WordPress plugin Glamer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS6.5AI score0.00404EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.1 views

WordPress plugin Magazine Saga 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

8.1CVSS6.6AI score0.00393EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.3 views

WordPress plugin BlogMarks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS6.5AI score0.00404EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.1 views

WordPress plugin Magazine 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in WordPress...

8.1CVSS6.3AI score0.00404EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.2 views

WordPress plugin Gutenify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS6.5AI score0.00445EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.2 views

WordPress plugin Poll, Survey & Quiz Maker Plugin by Opinion Stage 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin Poll, Survey & Quiz Maker Plugin...

7.5CVSS6.4AI score0.00417EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.1 views

WordPress plugin Jannah 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS6.5AI score0.00393EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.2 views

Linksys多款产品 安全漏洞

Linksys RE6300 and others are products of Linksys, Inc.Linksys RE6300 is a wireless network signal extender.Linksys RE6250 is a wireless extender.Linksys RE6350 is a wireless extender.Linksys RE6350 is a wireless extender.Linksys RE6350 is a wireless extender.Linksys RE6350 is a wireless...

8.8CVSS6.6AI score0.08406EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.2 views

PT-2025-35048

Name of the Vulnerable Software and Affected Versions: Unfoldwp Magazine Saga versions through 1.2.7 Description: The software contains an Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' issue, allowing PHP Local File Inclusion. Recommendations: Update...

8.1CVSS6.5AI score0.00393EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.1 views

PT-2025-35043

Name of the Vulnerable Software and Affected Versions: Glamer versions through 1.0.2 Description: The software contains an Improper Control of Filename for Include/Require Statement, specifically a PHP Local File Inclusion issue. Recommendations: Update to a version beyond 1.0.2...

8.1CVSS6.5AI score0.00404EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.0 views

WordPress plugin Kipso 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS6.5AI score0.00404EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.2 views

WordPress plugin Magazine Elite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS6.5AI score0.00404EPSS
Exploits0References2
OSV
OSV
added 2025/08/27 4:15 p.m.3 views

CVE-2025-50978

In Gitblit v1.7.1, a reflected cross-site scripting XSS vulnerability exists in the way repository path names are handled. By injecting a specially crafted path payload an attacker can cause arbitrary JavaScript to execute when a victim views the manipulated URL. This flaw stems from insufficient...

6.1CVSS6AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/27 3:14 p.m.3 views

CVE-2025-55298

A flaw was found in ImageMagick. Processing a file with a specially crafted name, specifically one with format specifiers such as %d, %o, or %x, can trigger a format string bug due to improper input sanitization, resulting in a heap-based buffer over-read or arbitrary code execution. Mitigation T...

8.8CVSS7.8AI score0.04098EPSS
Exploits1References6
NVD
NVD
added 2025/08/27 11:15 a.m.3 views

CVE-2025-30057

In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system call in the ConvertToPDF function...

9.4CVSS0.00737EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/27 10:23 a.m.3 views

CVE-2025-30057 Authenticated RCE with uhcapache privileges in ConvertToPDF

In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system call in the ConvertToPDF function...

9.4CVSS8.5AI score0.00737EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/27 10:23 a.m.4 views

CVE-2025-30057 Authenticated RCE with uhcapache privileges in ConvertToPDF

In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system call in the ConvertToPDF function...

9.4CVSS0.00737EPSS
Exploits0References1
CVE
CVE
added 2025/08/27 10:23 a.m.15 views

CVE-2025-30057

Technical details about CVE-2025-30057 are not publicly provided in the supplied documents. Monitor for updates when new information becomes available.

9.4CVSS7.5AI score0.00737EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/27 12:0 a.m.3 views

PT-2025-34852 · Uhcrtfdoc · Uhcrtfdoc

Name of the Vulnerable Software and Affected Versions: UHCRTFDoc affected versions not specified Description: The filename parameter in UHCRTFDoc can be exploited to execute arbitrary code through command injection into the system function call within the ConvertToPDF function. Recommendations: A...

9.4CVSS7.2AI score0.00737EPSS
Exploits0References5
Rows per page
Query Builder