Lucene search
+L

9403 matches found

CNNVD
CNNVD
added 2025/06/09 12:00 a.m.12 views

WordPress plugin Blogbyte 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in WordPress Blogbyte plugi, which stems from improper filename control and can be exploited by an attacker to cause PHP native file...

8.1CVSS6.8AI score0.00542EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/09 12:00 a.m.7 views

libarchive 缓冲区错误漏洞

libarchive is a multi-format archive and compression library open-sourced by libarchive. A buffer error vulnerability exists in libarchive, which stems from a difference-in-one error when handling filename prefixes and suffixes, which can lead to memory corruption...

5CVSS4.7AI score0.00183EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/06/09 12:00 a.m.7 views

WordPress plugin Magze 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.00575EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/09 12:00 a.m.7 views

WordPress plugin Blogmine 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress Blogmine plugin that stems from improper filename control and can be exploited by an attacker to cause PHP native file...

8.1CVSS6.8AI score0.00542EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/09 12:00 a.m.10 views

WordPress plugin BodyCenter - Gym, Fitness WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS7.7AI score0.00709EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/09 12:00 a.m.8 views

WordPress plugin Magways 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS6.5AI score0.00542EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/09 12:00 a.m.7 views

WordPress plugin Essential Real Estate 安全漏洞

WordPress Essential Real Estate is a WordPress plugin for creating and managing real estate websites. WordPress Essential Real Estate suffers from a filename miscontrol vulnerability. An attacker can exploit this vulnerability to construct malicious requests that result in PHP native file inclusi...

9.8CVSS6.5AI score0.00533EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/09 12:00 a.m.12 views

PT-2025-24440

Name of the Vulnerable Software and Affected Versions Whistle version 2.9.98 Description A vulnerability has been found in the file /cgi-bin/sessions/get-temp-file, where the manipulation of the filename argument leads to path traversal. The exploit has been disclosed to the public and may be use...

5.3CVSS5.4AI score0.00506EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
added 2025/06/06 2:40 a.m.6 views

SUSE CVE-2011-10007

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

8.4CVSS8.5AI score0.00765EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.9 views

WordPress plugin BRW 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS7.2AI score0.00686EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.6 views

WordPress plugin WP Multilang 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS7.2AI score0.00686EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.12 views

WordPress plugin WP Travel Engine 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS7.3AI score0.00686EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.12 views

WordPress plugin AI Mortgage Calculator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS7.3AI score0.00686EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.8 views

WordPress plugin Motors - Events 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9CVSS8.3AI score0.00636EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/05 12:15 p.m.14 views

CVE-2011-10007

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

8.8CVSS0.00765EPSS
SaveExploits0References8
OSV
OSV
added 2025/06/05 12:15 p.m.13 views

AZL-62239 CVE-2011-10007 affecting package perl-File-Find-Rule 0.34-15

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

8.8CVSS5.7AI score0.00765EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/05 11:57 a.m.194 views

CVE-2011-10007

CVE-2011-10007 : File::Find::Rule (Perl) up to version 0.34 is vulnerable to Arbitrary Code Execution when grep() processes a crafted filename. The issue arises from using the 2-argument form of open(), permitting an attacker-controlled filename to supply the MODE parameter, turning the filename ...

8.8CVSS7AI score0.00765EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2025/06/05 11:57 a.m.12 views

CVE-2011-10007

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

8.8CVSS7.7AI score0.00765EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/06/05 11:57 a.m.23 views

CVE-2011-10007 File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

0.00765EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/06/05 11:57 a.m.19 views

CVE-2011-10007

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

8.8CVSS8AI score0.00765EPSS
SaveExploits0
Rows per page
Query Builder