Lucene search
+L

979439 matches found

Cvelist
Cvelist
added 2026/08/12 6:0 a.m.29 views

CVE-2026-16051 WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

0.00589EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/12 6:0 a.m.13 views

EUVD-2026-57085

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

9.8CVSS5.8AI score0.00589EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/12 6:0 a.m.7 views

CVE-2026-16051 WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

5.8AI score0.00589EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 6:0 a.m.81 views

CVE-2026-16051

The CVE covers the wpmudev-updates WordPress plugin prior to 5.0.1. Affected component: the remote management interface; it does not verify the integrity of installed packages and lacks replay protection for management requests. This enables an attacker who can obtain or replay a valid signed man...

9.8CVSS5.8AI score0.00589EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 6:0 a.m.7 views

CVE-2026-16051

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

5.8AI score0.00589EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/12 6:0 a.m.5 views

CVE-2026-15039 Gift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Upload

The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution...

5.8AI score0.00569EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 6:0 a.m.44 views

CVE-2026-15039

The CVE-2026-15039 entry concerns the Gift Cards For WooCommerce Pro plugin for WordPress, affected versions prior to 4.2.10. The root cause is that one upload path does not validate the type of uploaded files, allowing unauthenticated users to upload arbitrary files (including PHP code). This ca...

9.8CVSS5.9AI score0.00569EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/12 6:0 a.m.8 views

EUVD-2026-57082

The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution...

9.8CVSS5.9AI score0.00569EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 6:0 a.m.28 views

CVE-2026-15039 Gift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Upload

The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution...

0.00569EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 6:0 a.m.7 views

CVE-2026-15039

The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution...

5.8AI score0.00569EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/12 5:45 a.m.8 views

mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd

A flaw was found in MariaDB server. When the wsrepnotifycmd feature is enabled, a remote attacker could exploit this vulnerability by embedding shell commands in the name of a joiner node. This could lead to arbitrary code execution on the server, allowing the attacker to take full control of the...

10CVSS6.3AI score0.01582EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/12 5:9 a.m.9 views

CVE-2026-9318

A flaw was found in tablib. This vulnerability, a stored cross-site scripting XSS issue, allows a remote attacker to execute arbitrary JavaScript code. By embedding malicious payloads within dataset titles, which are not properly sanitized during HTML export, an attacker can trigger the execution...

5.4CVSS5.4AI score0.00181EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/12 4:17 a.m.13 views

CVE-2025-15687

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...

5.3CVSS0.00612EPSS
SaveExploits0References10
NVD
NVD
added 2026/08/12 3:16 a.m.13 views

CVE-2025-15686

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

5.3CVSS0.0051EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/12 3:16 a.m.9 views

CVE-2025-15685

A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely...

6.5CVSS0.00382EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/12 3:16 a.m.11 views

CVE-2025-15684

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...

6.9CVSS0.0071EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/12 2:50 a.m.8 views

libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation

A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution...

8.3CVSS7.3AI score0.00706EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/12 2:45 a.m.26 views

CVE-2025-15687

CVE-2025-15687 affects Open5GS up to version 2.7.6, specifically the SMF Diameter Gx Credit-Control-Answer Handler function smf_gx_cca_cb. The issue is described as a manipulation that results in a denial of service, with remote-launch potential. Public exploit exists according to the description...

5.3CVSS4.7AI score0.00612EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2026/08/12 2:45 a.m.33 views

CVE-2025-15687 Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...

5.3CVSS0.00612EPSS
SaveExploits0References10
EUVD
EUVD
added 2026/08/12 2:45 a.m.10 views

EUVD-2025-210704

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...

5.3CVSS4.9AI score0.00612EPSS
SaveExploits0References10
Rows per page
Query Builder