Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-31173

Malicious code in bioql PyPI...

9.8CVSS6AI score0.00915EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-31269

Malicious code in bioql PyPI...

9.8CVSS6AI score0.01281EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 3:32 a.m.7 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS7.3AI score0.01281EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:31 a.m.6 views

CVE-2023-27397

Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS7.3AI score0.00915EPSS
Exploits0References1
OSV
OSV
added 2023/05/23 2:15 a.m.2 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS6.7AI score0.01281EPSS
Exploits0References2
OSV
OSV
added 2023/05/23 2:15 a.m.4 views

CVE-2023-27397

Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS6.7AI score0.00915EPSS
Exploits0References2
NVD
NVD
added 2023/05/23 2:15 a.m.17 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS9.6AI score0.01281EPSS
Exploits0References2
Prion
Prion
added 2023/05/23 2:15 a.m.14 views

Path traversal

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

7.5CVSS9.6AI score0.01281EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/23 12:0 a.m.6 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.7AI score0.01281EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.3 views

MicroEngine Mailform 路径遍历漏洞

MicroEngine Mailform is a PHP mail form from MicroEngine Japan. A security vulnerability exists in MicroEngine Mailform versions 1.1.0 through 1.1.8, which stems from a path traversal vulnerability that could allow a remote attacker to save an arbitrary file on the server and execute it...

9.8CVSS6.7AI score0.01281EPSS
Exploits0References3
CVE
CVE
added 2023/05/23 12:0 a.m.53 views

CVE-2023-27397

Vulnerability summary (CVE-2023-27397) : MicroEngine Mailform (versions 1.1.0–1.1.8) suffers an unrestricted upload of a dangerous file type when the product’s file upload and server save options are enabled. This allows a remote attacker to save an arbitrary file on the server and execute it, le...

9.8CVSS9.4AI score0.00915EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.3 views

PT-2023-21096 · Microengine · Microengine Mailform

Name of the Vulnerable Software and Affected Versions: MicroEngine Mailform versions 1.1.0 through 1.1.8 PostgreSQL affected versions not specified Description: The issue allows for the unrestricted upload of files with dangerous types. If the file upload function and server save option are...

9.8CVSS7.5AI score0.00915EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.4 views

MicroEngine Mailform 代码问题漏洞

MicroEngine Mailform is a PHP mail form from MicroEngine Japan. A security vulnerability exists in MicroEngine Mailform versions 1.1.0 through 1.1.8, which stems from an unrestricted upload of a dangerous type of file, and allows a remote attacker to save an arbitrary file on the server and execu...

9.8CVSS6.7AI score0.00915EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/05/23 12:0 a.m.13 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8AI score0.01281EPSS
Exploits0References2
CVE
CVE
added 2023/05/23 12:0 a.m.51 views

CVE-2023-27507

CVE-2023-27507 affects MicroEngine Mailform, versions 1.1.0 through 1.1.8. The root cause is a path traversal vulnerability in the file upload/server save logic, allowing a remote attacker to save arbitrary files on the server and execute them when the affected functions are enabled. Impact inclu...

9.8CVSS9.5AI score0.01281EPSS
Exploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/05/10 12:0 a.m.25 views

JVN#31701509: Multiple vulnerabilities in MicroEngine Mailform

MicroEngine Mailform provided by MicroEngine Inc. contains multiple vulnerabilities listed below. Unrestricted upload of file with dangerous type CWE-434 - CVE-2023-27397 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N| Base Score: 3.7 CVSS v2|...

9.8CVSS10AI score0.01281EPSS
Exploits0
Rows per page
Query Builder