Lucene search
+L

356 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•7 views

CVE-2025-30580: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in kellydiek DigiWidgets Image Editor digiwidgets-image-editor allows Remote Code Inclusion.This issue affects DigiWidgets Image Editor: from n/a through = 1.10...

10CVSS8.6AI score0.00676EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•11 views

CVE-2025-1534: Improper Neutralization of Input During Web Page Generation

CVE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Payara Platform Payara Server allows : Remote Code Inclusion.This issue affects Payara Server: from 4.1.2.1919.1 before 4.1.2.191.51, from 5.20.0 before 5.68.0, from 6.0.0 before 6.23.0, fr...

6.8CVSS5.9AI score0.00301EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/28 5:50 p.m.•20 views

CVE-2025-28893

Improper Control of Generation of Code 'Code Injection' vulnerability in Govind Visual Text Editor visual-text-editor allows Remote Code Inclusion.This issue affects Visual Text Editor: from n/a through = 1.2.1...

9.9CVSS8.6AI score0.00795EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/26 3:16 p.m.•26 views

CVE-2025-28893

Improper Control of Generation of Code 'Code Injection' vulnerability in Govind Visual Text Editor visual-text-editor allows Remote Code Inclusion.This issue affects Visual Text Editor: from n/a through = 1.2.1...

9.9CVSS0.00795EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/26 2:24 p.m.•97 views

CVE-2025-28893

CVE-2025-28893 affects the WordPress plugin Visual Text Editor (versions up to 1.2.1). The vulnerability is described as a code-generation/remote code execution issue, with the CWE suggesting code injection via generation of code, and the CVE entry noting Remote Code Execution . The issue appears...

9.9CVSS8.5AI score0.00795EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•8 views

CVE-2025-28893: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Govind Visual Text Editor visual-text-editor allows Remote Code Inclusion.This issue affects Visual Text Editor: from n/a through = 1.2.1...

9.9CVSS8.6AI score0.00795EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•9 views

PT-2025-12955

Name of the Vulnerable Software and Affected Versions NotFound Visual Text Editor versions 1.2.1 and earlier Description The issue is related to improper control of code generation, allowing remote code inclusion. This can lead to remote code injection due to the improper control of code...

9.9CVSS8.6AI score0.00795EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/26 12:00 a.m.•18 views

WordPress plugin Visual Text Editor: Code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

9.9CVSS8.5AI score0.00795EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/07 9:50 a.m.•15 views

CVE-2025-24677

Improper Control of Generation of Code 'Code Injection' vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies allows Remote Code Inclusion.This issue affects Post/Page Copying Tool: from n/a through = 2.0.3...

9.9CVSS7.3AI score0.00505EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:24 a.m.•16 views

CVE-2024-5683

Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...

9.8CVSS5.8AI score0.00512EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:54 p.m.•30 views

CVE-2024-26289

Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18...

9.8CVSS7.4AI score0.00609EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/04 3:15 p.m.•36 views

CVE-2025-24677

Improper Control of Generation of Code 'Code Injection' vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies allows Remote Code Inclusion.This issue affects Post/Page Copying Tool: from n/a through = 2.0.3...

9.9CVSS0.00505EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•24 views

PT-2025-5497 · WordPress · Wpspins Post/Page Copying Tool

Name of the Vulnerable Software and Affected Versions: WPSpins Post/Page Copying Tool versions 0 through 2.0.3 Description: The issue is related to improper control of code generation, allowing remote code inclusion due to a code injection flaw. This enables remote code inclusion, posing a...

9.9CVSS7.8AI score0.00505EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•6 views

CVE-2025-24677: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies allows Remote Code Inclusion.This issue affects Post/Page Copying Tool: from n/a through = 2.0.3...

9.9CVSS5.8AI score0.00505EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/17 1:52 p.m.•70 views

CVE-2024-13503

CVE-2024-13503 affects Newtec NTC2218, NTC2250 and NTC2299 on Linux (PowerPC/ARM). A stack buffer overflow in the swdownload binary is caused by an unrestricted sscanf in the parse_INFO function, reading an incoming network packet into a fixed-size buffer. This leads to arbitrary code execution w...

9.5CVSS8.4AI score0.00541EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/17 1:52 p.m.•33 views

CVE-2024-13503 Stack-Based Buffer Overflow in Newtec's update signaling causes RCE

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM Updating signaling process in the swdownload binary modules allows Local Execution of Code, Remote Code Inclusion. This issue affects NTC2218, NTC2250,...

9.5CVSS0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•11 views

CVE-2024-13503: Buffer Copy without Checking Size of Input

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Newtec NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM Updating signaling process in the swdownload binary modules allows Local Execution of Code, Remote Code Inclusion. This issue affects NTC2218, NTC2250,...

9.5CVSS6.9AI score0.00541EPSS
SaveExploits0References1
Debian
Debian
•added 2024/12/07 4:40 p.m.•77 views

[SECURITY] [DLA 3984-1] zabbix security update

Debian LTS Advisory DLA-3984-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 07, 2024 https://wiki.debian.org/LTS Package : zabbix Version : 1:5.0.45+dfsg-1+deb11u1 CVE ID : CVE-2024-36464 CVE-2024-42330 CVE-2024-42331 CVE-2024-42332 CVE-2024-42333 Debian...

9.1CVSS6.4AI score0.00945EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/12/07 12:00 a.m.•23 views

Debian dla-3984 : zabbix-agent - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3984 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3984-1 [email protected]...

9.1CVSS6.2AI score0.00945EPSS
SaveExploits0References12
NCSC
NCSC
•added 2024/12/06 11:49 a.m.•26 views

Vulnerabilities fixed in ABB ASPECT, NEXUS Series and MATRIX Series

ABB has fixed vulnerabilities in ABB ASPECT, NEXUS Series and MATRIX Series Specifically for versions up to 3.08.02. The vulnerabilities include unauthorized access to files on the Web server, which can lead to data leakage or unauthorized data manipulation. In addition, serious vulnerabilities...

10CVSS8AI score0.1901EPSS
SaveExploits48References1
Rows per page
Query Builder