Lucene search
+L

202 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2011-4963

Malware in sbrugna...

3.3CVSS6.1AI score0.00313EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-5175

Malware in sbrugna...

7.2CVSS6.3AI score0.02497EPSS
SaveExploits3References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2004-0994

Malware in sbrugna...

2.1CVSS6.1AI score0.01145EPSS
SaveExploits2References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2005-2956

Malware in sbrugna...

5CVSS6.4AI score0.0287EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-1990

Malware in sbrugna...

5.3CVSS5.3AI score0.01442EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-24727

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01394EPSS
SaveExploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-3297

Malicious code in bioql PyPI...

10CVSS6.3AI score0.02665EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-12779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without...

7.1CVSS7AI score0.00655EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/07/02 12:0 a.m.6 views

WordPress plugin Contact Form by Bit Form 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. An information disclosure vulnerabili...

7.5CVSS5.8AI score0.0032EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 8:59 p.m.10 views

CVE-2021-20148

ManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain under the html/ web root with a predictable filename based on the domain name. When ADSSP is configured with multiple Windows domains, a user from one domain can obtain the password policy for another...

4.3CVSS7AI score0.01116EPSS
SaveExploits1References1
Veracode
Veracode
added 2025/05/07 4:55 a.m.7 views

Unauthorized Backup Access

yeswiki/yeswiki is vulnerable to unauthorized backup access. The vulnerability is due to missing authentication checks and predictable backup filenames, which allows an attacker to create and download backup archives without authentication...

10CVSS6.8AI score0.00604EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2024/08/03 6:16 a.m.29 views

CVE-2024-6477

The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive information such as IP, username, and email address...

7.5CVSS0.00575EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/08/03 6:0 a.m.15 views

CVE-2024-6477 UsersWP < 1.2.12 - Users Information Disclosure

The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive information such as IP, username, and email address...

6AI score0.00575EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/08/03 6:0 a.m.33 views

CVE-2024-6477 UsersWP < 1.2.12 - Users Information Disclosure

The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive information such as IP, username, and email address...

0.00575EPSS
SaveExploits1References1
CVE
CVE
added 2024/08/03 6:0 a.m.56 views

CVE-2024-6477

CVE-2024-6477 affects the UsersWP WordPress plugin prior to 1.2.12. The vulnerability arises from predictable filenames generated for admin exports, allowing unauthenticated attackers to download exports and access sensitive user data (IP, username, email). Public sources in connected documents c...

7.5CVSS6AI score0.00575EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/12 12:0 a.m.5 views

PT-2023-20766 · Unknown · Rosariosis

Name of the Vulnerable Software and Affected Versions: RosarioSIS versions prior to 11.0 Description: The issue allows unauthorized access to sensitive data due to a lack of access control in a mechanism. Specifically, it enables anyone to download and view file attachments under the salaries...

7.5CVSS7.6AI score0.00613EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.6 views

SUSE CVE-2002-0389

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives...

2.1CVSS6.5AI score0.0043EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:18 a.m.3 views

SUSE CVE-2005-1270

The 1 checkupdate.sh and 2 rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

2.1CVSS6.7AI score0.00342EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:11 a.m.5 views

SUSE CVE-2019-12779

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without OEXCL...

6.5CVSS6.7AI score0.00655EPSS
SaveExploits1References9
CNVD
CNVD
added 2022/06/15 12:0 a.m.60 views

WordPress Log WP_Mail plugin Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

7.5CVSS7.2AI score0.01394EPSS
SaveExploits2References1
Rows per page
Query Builder