Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-31173

Malicious code in bioql PyPI...

9.8CVSS6AI score0.00932EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-31269

Malicious code in bioql PyPI...

9.8CVSS6AI score0.01855EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 3:32 a.m.4 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS7.3AI score0.01855EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:31 a.m.3 views

CVE-2023-27397

Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS7.3AI score0.00932EPSS
Exploits0References1
NVD
NVD
added 2023/05/23 2:15 a.m.14 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS9.6AI score0.01855EPSS
Exploits0References2
OSV
OSV
added 2023/05/23 2:15 a.m.0 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS6.7AI score0.01855EPSS
Exploits0References2
OSV
OSV
added 2023/05/23 2:15 a.m.1 views

CVE-2023-27397

Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8CVSS6.7AI score0.00932EPSS
Exploits0References2
Prion
Prion
added 2023/05/23 2:15 a.m.13 views

Path traversal

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

7.5CVSS9.6AI score0.01855EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/05/23 12:0 a.m.47 views

CVE-2023-27507

CVE-2023-27507 affects MicroEngine Mailform, versions 1.1.0 through 1.1.8. The root cause is a path traversal vulnerability in the file upload/server save logic, allowing a remote attacker to save arbitrary files on the server and execute them when the affected functions are enabled. Impact inclu...

9.8CVSS9.5AI score0.01855EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/05/23 12:0 a.m.50 views

CVE-2023-27397

Vulnerability summary (CVE-2023-27397) : MicroEngine Mailform (versions 1.1.0–1.1.8) suffers an unrestricted upload of a dangerous file type when the product’s file upload and server save options are enabled. This allows a remote attacker to save an arbitrary file on the server and execute it, le...

9.8CVSS9.4AI score0.00932EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/23 12:0 a.m.5 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.7AI score0.01855EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.2 views

MicroEngine Mailform 路径遍历漏洞

MicroEngine Mailform is a PHP mail form from MicroEngine Japan. A security vulnerability exists in MicroEngine Mailform versions 1.1.0 through 1.1.8, which stems from a path traversal vulnerability that could allow a remote attacker to save an arbitrary file on the server and execute it...

9.8CVSS6.7AI score0.01855EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.2 views

PT-2023-21096 · Microengine · Microengine Mailform

Name of the Vulnerable Software and Affected Versions: MicroEngine Mailform versions 1.1.0 through 1.1.8 PostgreSQL affected versions not specified Description: The issue allows for the unrestricted upload of files with dangerous types. If the file upload function and server save option are...

9.8CVSS7.5AI score0.00932EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.2 views

MicroEngine Mailform 代码问题漏洞

MicroEngine Mailform is a PHP mail form from MicroEngine Japan. A security vulnerability exists in MicroEngine Mailform versions 1.1.0 through 1.1.8, which stems from an unrestricted upload of a dangerous type of file, and allows a remote attacker to save an arbitrary file on the server and execu...

9.8CVSS6.7AI score0.00932EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/05/23 12:0 a.m.9 views

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

9.8AI score0.01855EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/05/10 12:0 a.m.21 views

JVN#31701509: Multiple vulnerabilities in MicroEngine Mailform

MicroEngine Mailform provided by MicroEngine Inc. contains multiple vulnerabilities listed below. Unrestricted upload of file with dangerous type CWE-434 - CVE-2023-27397 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N| Base Score: 3.7 CVSS v2|...

9.8CVSS10AI score0.01855EPSS
Exploits0
Rows per page
Query Builder