Lucene search
+L

249 matches found

RedhatCVE
RedhatCVE
•added 2025/09/11 9:30 p.m.•28 views

CVE-2025-43491

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted...

7.3CVSS6.9AI score0.00283EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/09 9:15 p.m.•16 views

CVE-2025-43491

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted...

9.8CVSS5.5AI score0.00283EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/09 9:15 p.m.•12 views

CVE-2025-43491

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted...

9.8CVSS0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/09 8:29 p.m.•5 views

CVE-2025-43491 Poly Lens Desktop Application – Privilege Escalation

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted...

7.3CVSS6.2AI score0.00283EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/09 8:29 p.m.•23 views

CVE-2025-43491 Poly Lens Desktop Application – Privilege Escalation

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted...

7.3CVSS0.00283EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/09 8:29 p.m.•70 views

CVE-2025-43491

CVE-2025-43491 concerns HP Poly Lens Desktop on Windows, where a flaw may allow modifying the filesystem and could grant SYSTEM-level privileges. The available connected documents consistently describe a filesystem-modification path to privilege escalation but do not provide concrete exploit deta...

9.8CVSS6.4AI score0.00283EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•12 views

HP Poly Lens 安全漏洞

HP Poly Lens is a unified collaboration management and device management software from Hewlett-Packard HP. A security vulnerability exists in HP Poly Lens that stems from allowing file system modifications that could result in gaining SYSTEM privileges...

9.8CVSS6.8AI score0.00283EPSS
SaveExploits0References2
Hewlett-Packard
Hewlett-Packard
•added 2025/09/09 12:00 a.m.•22 views

Poly Lens Desktop Application – Privilege Escalation

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with...

9.8CVSS5.8AI score0.00283EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•13 views

PT-2025-36958

Name of the Vulnerable Software and Affected Versions: Poly Lens Desktop affected versions not specified Description: A flaw in the Poly Lens Desktop application on Windows may permit filesystem modifications, potentially granting SYSTEM level privileges. Recommendations: At the moment, there is ...

7.3CVSS6.1AI score0.00283EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•2 views

CVE-2025-43491: Improper Control of Resource Identifiers

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted...

9.8CVSS5.8AI score0.00283EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:18 p.m.•17 views

CVE-2025-8562

The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which can...

6.5CVSS5.7AI score0.00426EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2025-2476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromi...

8.8CVSS7.1AI score0.01042EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/25 10:15 a.m.•14 views

CVE-2025-8562

The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which can...

6.5CVSS0.00426EPSS
SaveExploits0References5
CVE
CVE
•added 2025/08/25 9:23 a.m.•37 views

CVE-2025-8562

CVE-2025-8562 refers to a path traversal vulnerability in the WordPress plugin Custom Query Shortcode (versions

6.5CVSS6AI score0.00426EPSS
SaveExploits0References5
OSV
OSV
•added 2025/08/25 9:23 a.m.•13 views

CVE-2025-8562 Custom Query Shortcode <= 0.4.0 - Authenticated (Contributor+) Path Traversal via lens Parameter

The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which can...

6.5CVSS5.9AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2025/08/25 9:23 a.m.•33 views

CVE-2025-8562 Custom Query Shortcode <= 0.4.0 - Authenticated (Contributor+) Path Traversal via lens Parameter

The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which can...

6.5CVSS0.00426EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/08/25 9:23 a.m.•8 views

CVE-2025-8562 Custom Query Shortcode <= 0.4.0 - Authenticated (Contributor+) Path Traversal via lens Parameter

The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which can...

6.5CVSS6AI score0.00426EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/08/25 12:00 a.m.•17 views

PT-2025-34602 · WordPress · Custom Query Shortcode

Name of the Vulnerable Software and Affected Versions: Custom Query Shortcode versions prior to 0.4.1 Description: The Custom Query Shortcode plugin for WordPress is vulnerable to a Path Traversal issue via the lens parameter. Authenticated attackers with Contributor-level access or higher can re...

6.5CVSS6.3AI score0.00426EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/08/25 12:00 a.m.•28 views

WordPress plugin Custom Query Shortcode 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exis...

6.5CVSS6.4AI score0.00426EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/25 12:00 a.m.•1 views

CVE-2025-8562: Improper Limitation of a Pathname to a Restricted Directory

The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which can...

6.5CVSS5.7AI score0.00426EPSS
SaveExploits0References1
Rows per page
Query Builder