Lucene search
K

153 matches found

Chainguard
Chainguard
added 2026/05/09 1:17 a.m.11 views

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: emissary, cluster-api-ipam-provider-in-cluster, minc-fips, crossplane-provider-aws-vpc-fips, jobset-fips, kube-logging-operator, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-ssm, crossplane-provider-azure-signalrservice, apache-exporter,...

7.5CVSS5.8AI score0.00018EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/26 2:56 p.m.2 views

CVE-2019-25630

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the...

8.8CVSS6.3AI score0.003EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/24 12:30 p.m.0 views

EUVD-2019-20033

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them...

8.8CVSS6.7AI score0.00338EPSS
Exploits1References5
EUVD
EUVD
added 2026/03/24 12:30 p.m.1 views

EUVD-2019-20000

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the...

8.8CVSS6.3AI score0.003EPSS
Exploits1References5
NVD
NVD
added 2026/03/24 12:16 p.m.1 views

CVE-2019-25647

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them...

8.8CVSS0.00338EPSS
Exploits1References4
NVD
NVD
added 2026/03/24 12:16 p.m.1 views

CVE-2019-25630

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the...

8.8CVSS0.003EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/03/24 11:27 a.m.17 views

CVE-2019-25647 PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them...

8.8CVSS0.00338EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/24 11:27 a.m.2 views

CVE-2019-25647

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them...

8.8CVSS6.7AI score0.00338EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/24 11:27 a.m.2 views

CVE-2019-25647 PhreeBooks ERP 5.2.3 Remote Code Execution via Image Manager

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them...

8.8CVSS6.7AI score0.00338EPSS
Exploits1References4
CVE
CVE
added 2026/03/24 11:27 a.m.5 views

CVE-2019-25647

CVE-2019-25647 affects PhreeBooks ERP 5.2.3. A remote code execution vulnerability exists in the image manager that lets an authenticated attacker upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can place malicious PHP files via the image manager endpoint an...

8.8CVSS6.7AI score0.00338EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/24 11:27 a.m.1 views

CVE-2019-25630

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the...

8.8CVSS6.3AI score0.003EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2026/03/24 11:27 a.m.4 views

CVE-2019-25630

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager. Authenticated attackers can upload PHP files via the imgFile parameter to bizuno/image/manager and trigger remote code execution through bizunoFS.php. This is a network-accessible issue with high impact on ...

8.8CVSS6.3AI score0.003EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/03/24 11:27 a.m.15 views

CVE-2019-25630 PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the...

8.8CVSS0.003EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/03/24 11:27 a.m.0 views

CVE-2019-25630 PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the...

8.8CVSS6.3AI score0.003EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.2 views

PhreeSoft PhreeBooks ERP 跨站脚本漏洞

PhreeSoft PhreeBooks ERP is a business resource planning software provided by PhreeSoft Corporation, which offers enterprise financial management and business process handling functions. Version 5.2.3 of PhreeSoft PhreeBooks ERP contains a cross-site scripting vulnerability. This vulnerability...

8.8CVSS5.8AI score0.003EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.2 views

PhreeSoft PhreeBooks ERP 代码问题漏洞

PhreeSoft PhreeBooks ERP is a business resource planning software provided by PhreeSoft Corporation, which offers enterprise financial management and business process handling functions. Version 5.2.3 of PhreeSoft PhreeBooks ERP contains a code vulnerability. This vulnerability stems from a remot...

8.8CVSS6.6AI score0.00338EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.2 views

PT-2026-27364

PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by submitting requests to the image upload endpoint. Attackers can upload PHP files through the imgFile parameter to the...

8.8CVSS6.3AI score0.003EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.4 views

PT-2026-27381

PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassing file extension controls. Attackers can upload malicious PHP files through the image manager endpoint and execute them...

8.8CVSS6.7AI score0.00338EPSS
Exploits1References5
EUVD
EUVD
added 2026/03/10 6:31 p.m.1 views

EUVD-2026-10629

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

7.8CVSS5.9AI score0.00579EPSS
Exploits0References2
NVD
NVD
added 2026/03/10 6:18 p.m.2 views

CVE-2026-25166

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

7.8CVSS0.00579EPSS
Exploits0References1
Rows per page
Query Builder