Lucene search
+L

6119 matches found

Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•29 views

PT-2025-16457 · Oracle · Oracle Bi Publisher

Name of the Vulnerable Software and Affected Versions: Oracle BI Publisher versions 7.6.0.0.0 through 12.2.1.4.0 Description: The issue affects the Oracle BI Publisher product of Oracle Analytics, specifically the XML Services component. It allows a low-privileged attacker with network access via...

5.4CVSS6.5AI score0.00331EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•2 views

CVE-2025-30723: Undefined Security Weakness

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are affected are 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successf...

5.4CVSS5.7AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•21 views

Oracle Analytics 安全漏洞

Oracle Analytics is an enterprise analytics solution from Oracle Corporation USA. A security vulnerability exists in Oracle BI Publisher version 7.6.0.0.0 and version 12.2.1.4.0 for Oracle Analytics, which originates from an attack by a low-privileged attacker with HTTP web access, and could resu...

5.4CVSS6.8AI score0.00331EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•3 views

CVE-2025-30724: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are affected are 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher...

7.5CVSS7AI score0.00428EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/01 10:07 p.m.•14 views

WordPress Smart Icons For WordPress plugin <= 1.0.4 - Authenticated (Editor+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Editor+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Avraham Shemesh in WordPress Plugin Smart Icons For WordPress versions = 1.0.4...

6.4CVSS6.3AI score0.00325EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2025/03/31 1:59 p.m.•12 views

WordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin ContentMX Content Publisher versions = 1.0.6...

5.4CVSS7AI score0.0032EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/31 12:55 p.m.•6 views

CVE-2025-31555 WordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ContentMX ContentMX Content Publisher allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ContentMX Content Publisher: from n/a through 1.0.6...

5.4CVSS6.9AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/31 12:55 p.m.•64 views

CVE-2025-31555

Technical details for CVE-2025-31555 are not provided in the connected documents; monitor for updates and official advisories.

5.4CVSS7.2AI score0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/31 12:55 p.m.•29 views

CVE-2025-31555 WordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ContentMX ContentMX Content Publisher contentmx-content-publisher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ContentMX Content Publisher: from n/a through = 1.0.6...

5.4CVSS0.0032EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•12 views

WordPress plugin ContentMX Content Publisher 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.3AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•5 views

CVE-2025-31555: Missing Authorization

Missing Authorization vulnerability in ContentMX ContentMX Content Publisher contentmx-content-publisher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ContentMX Content Publisher: from n/a through = 1.0.6...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•3 views

PT-2025-13717

Name of the Vulnerable Software and Affected Versions ContentMX Content Publisher versions 1.0.0 through 1.0.6 Description The issue is related to a Missing Authorization vulnerability in ContentMX Content Publisher, which allows exploiting incorrectly configured access control security levels...

5.4CVSS0.0032EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•6 views

CVE-2025-22637: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Cross Site Request Forgery.This issue affects Print PDF Generator and Publisher: from n/a through = 1.2.0...

4.3CVSS5.8AI score0.00145EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•2 views

PT-2025-13272

Name of the Vulnerable Software and Affected Versions verkkovaraani Print PDF Generator and Publisher versions 1.2.0 and earlier Description A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations For version...

4.3CVSS0.00145EPSS
SaveExploits0References4
Mend
Mend
•added 2025/03/18 11:32 a.m.•2 views

MSC-2025-3459

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2025/03/18 11:32 a.m.•3 views

MSC-2025-3486

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2025/03/18 11:32 a.m.•2 views

MSC-2025-3476

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2025/03/18 11:32 a.m.•2 views

MSC-2025-3440

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2025/03/18 11:32 a.m.•2 views

MSC-2025-3455

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2025/03/18 11:32 a.m.•2 views

MSC-2025-3505

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

8.8CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder