Lucene search
+L

862 matches found

Cvelist
Cvelist
added 2026/02/04 8:25 a.m.34 views

CVE-2025-15508 Magic Import Document Extractor <= 1.0.6 - Unauthenticated Sensitive Information Exposure

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS0.00304EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.21 views

PT-2026-5890

Name of the Vulnerable Software and Affected Versions Magic Import Document Extractor plugin for WordPress versions up to and including 1.0.4 Description The software is susceptible to a sensitive information exposure issue. Unauthenticated attackers can extract the site's magicimport.ai license...

5.3CVSS5.4AI score0.00304EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/29 12:47 a.m.1 views

CGA-H2XJ-QW8X-C59F

Bulletin has no description...

4.9CVSS5.8AI score0.00786EPSS
SaveExploits0
OSV
OSV
added 2026/01/29 12:42 a.m.2 views

CGA-55VQ-QP8X-4JWV

Bulletin has no description...

4.9CVSS6.8AI score0.02593EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 12:35 p.m.9 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS6.8AI score0.00676EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/12/03 1:44 p.m.318 views

Exploit for CVE-2025-41115

Grafana SCIMalform CVE-2025-41115 Overview This re...

10CVSS6.8AI score0.16905EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/11/12 3:46 a.m.8 views

CVE-2025-11894

The Shelf Planner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several REST API endpoints in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to modify several of the plugin's settings li...

5.3CVSS5.9AI score0.00275EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/11 4:15 a.m.8 views

CVE-2025-11894

The Shelf Planner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several REST API endpoints in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to modify several of the plugin's settings li...

5.3CVSS0.00275EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/11 3:30 a.m.12 views

CVE-2025-11894 Shelf Planner <= 2.8.1 - Missing Authorization to Unauthenticated Settings Update

The Shelf Planner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several REST API endpoints in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to modify several of the plugin's settings li...

5.3CVSS0.00275EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/11 3:30 a.m.20 views

CVE-2025-11894

CVE-2025-11894 : The Shelf Planner WordPress plugin (versions

5.3CVSS5.9AI score0.00275EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.10 views

CVE-2023-53689

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting XSS vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly...

6CVSS5.8AI score0.00826EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/30 10:15 p.m.10 views

CVE-2023-53689

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting XSS vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly...

6CVSS0.00826EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/30 10:15 p.m.8 views

CVE-2023-53689

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting XSS vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly...

4.8CVSS5.8AI score0.00826EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/30 9:20 p.m.18 views

CVE-2023-53689 Nagios Fusion < 4.2.0 License Information Reflected XSS

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting XSS vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly...

6CVSS0.00826EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/30 9:20 p.m.20 views

CVE-2023-53689

Nagios Fusion

6CVSS5.4AI score0.00826EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 9:20 p.m.3 views

CVE-2023-53689 Nagios Fusion < 4.2.0 License Information Reflected XSS

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting XSS vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly...

6CVSS5.4AI score0.00826EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.8 views

Nagios Fusion 安全漏洞

Nagios Fusion is a centralized monitoring and visualization platform from the US-based Nagios, Inc. A security vulnerability exists in Nagios Fusion versions prior to 4.2.0 that stems from reflective cross-site scripting in the license key configuration process, which could lead to the execution ...

6CVSS6.1AI score0.00826EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.23 views

PT-2025-44487

Name of the Vulnerable Software and Affected Versions Nagios Fusion versions prior to 4.2.0 Description Nagios Fusion versions prior to 4.2.0 have a reflected cross-site scripting XSS issue in the license key configuration process. This allows an attacker to execute scripts in a user's browser by...

6CVSS5.9AI score0.00826EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-11219

Malware in sbrugna...

6.1CVSS6.2AI score0.01188EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-14536

Malware in sbrugna...

8.1CVSS8AI score0.00244EPSS
SaveExploits0References2
Rows per page
Query Builder