Lucene search
+L

73 matches found

Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.9 views

PT-2025-52625

Name of the Vulnerable Software and Affected Versions Ragic Enterprise Cloud Database affected versions not specified Description An unauthenticated remote attacker can exploit a Relative Path Traversal issue to download arbitrary system files. The issue is an Arbitrary File Read impacting the...

8.7CVSS6.8AI score0.00523EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/10/14 8:54 a.m.5 views

CVE-2025-11675

Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS8.3AI score0.00541EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/13 9:30 a.m.6 views

EUVD-2025-34044

Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS7.9AI score0.00541EPSS
Exploits0References3
NVD
NVD
added 2025/10/13 8:15 a.m.7 views

CVE-2025-11675

Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS0.00541EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/13 7:56 a.m.3 views

CVE-2025-11675 Ragic|Enterprise Cloud Database - Arbitrary File Upload

Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS8AI score0.00541EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/13 7:56 a.m.11 views

CVE-2025-11675 Ragic|Enterprise Cloud Database - Arbitrary File Upload

Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS0.00541EPSS
Exploits0References2
CVE
CVE
added 2025/10/13 7:56 a.m.20 views

CVE-2025-11675

CVE-2025-11675 affects Ragic’s Enterprise Cloud Database. The connected sources describe an Arbitrary File Upload vulnerability that lets privileged remote attackers upload and execute web shell backdoors, enabling arbitrary code execution on the server. The reports consistently name the affected...

8.6CVSS8AI score0.00541EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.7 views

Ragic Enterprise Cloud Database 代码问题漏洞

Ragic Enterprise Cloud Database is an enterprise cloud database from Ragic, Inc. A code issue vulnerability exists in Ragic Enterprise Cloud Database that stems from a backdoor that allows a privileged remote attacker to upload and execute web scripts, which could lead to the execution of arbitra...

8.6CVSS7.7AI score0.00541EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-25120

Malware in sbrugna...

5.4CVSS5.6AI score0.00703EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-44007

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00429EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-34061

Malicious code in bioql PyPI...

6.4CVSS8.8AI score0.00409EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-50262

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00656EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-50264

Malicious code in bioql PyPI...

10CVSS6.6AI score0.00625EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:51 a.m.8 views

CVE-2024-11431

The Ragic Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00409EPSS
Exploits0References1
NVD
NVD
added 2024/11/28 9:15 a.m.37 views

CVE-2024-11431

The Ragic Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00409EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/11/28 8:47 a.m.13 views

CVE-2024-11431 Ragic Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Ragic Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00409EPSS
Exploits0References4
CVE
CVE
added 2024/11/28 8:47 a.m.56 views

CVE-2024-11431

CVE-2024-11431 concerns the WordPress plugin Ragic Shortcode . Multiple connected sources confirm a Stored Cross-Site Scripting (XSS) vulnerability exploited via the plugin’s ragic shortcode in versions up to and including 1.2, caused by insufficient input sanitization and output escaping on user...

6.4CVSS5.8AI score0.00409EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/11/28 8:47 a.m.34 views

CVE-2024-11431 Ragic Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Ragic Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00409EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/11/28 12:0 a.m.6 views

PT-2024-16987 · WordPress · Ragic Shortcode

Name of the Vulnerable Software and Affected Versions: Ragic Shortcode plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS6.2AI score0.00409EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/11/28 12:0 a.m.4 views

WordPress plugin Ragic Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.9AI score0.00409EPSS
Exploits0References4
Rows per page
Query Builder