Lucene search
K

671 matches found

CNNVD
CNNVD
added 2025/11/01 12:0 a.m.2 views

WordPress plugin Import WP – Export and Import CSV and XML files to WordPress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension that can ...

4.9CVSS6AI score0.00082EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2025/10/21 8:29 p.m.4 views

CVE-2025-8051

Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2...

6.5CVSS6.8AI score0.00076EPSS
Exploits0References1
OSV
OSV
added 2025/10/20 8:15 p.m.1 views

CVE-2025-8051

Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2...

6.5CVSS5.8AI score0.00076EPSS
Exploits0References1
NVD
NVD
added 2025/10/20 8:15 p.m.3 views

CVE-2025-8051

Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2...

6.5CVSS0.00076EPSS
Exploits0References1
CVE
CVE
added 2025/10/20 7:55 p.m.7 views

CVE-2025-8051

CVE-2025-8051 affects OpenText Flipper 3.1.2. The issue is a path traversal vulnerability that could allow an attacker to access files hosted on the server (absolute path traversal). The connected documents confirm the affected product and the vulnerability class but do not provide a specific fix...

6.5CVSS6.4AI score0.00076EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/10/18 12:0 a.m.1 views

WordPress plugin Media Library Assistant 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Media...

5.3CVSS6.3AI score0.00065EPSS
Exploits0References4
NVD
NVD
added 2025/10/16 5:15 p.m.6 views

CVE-2025-58051

Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leake...

6.5CVSS0.00015EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/16 4:48 p.m.3 views

EUVD-2025-34797

Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leake...

6.5CVSS6.2AI score0.00015EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.1 views

Nextcloud Tables 安全漏洞

Nextcloud Tables is an open source tables application from Nextcloud. A security vulnerability exists in Nextcloud Tables versions prior to 0.7.6, prior to 0.8.8, and prior to 0.9.5, which stems from a server file that can be specified when importing a table, potentially leading to a disclosure o...

6.5CVSS6.4AI score0.00015EPSS
Exploits0References3
CVE
CVE
added 2025/10/15 8:25 a.m.9 views

CVE-2025-11722

The CVE CVE-2025-11722 affects the WordPress plugin “Woocommerce Category and Products Accordion Panel” (accordion-panel-for-category-and-products). The vulnerability is Local File Inclusion via the categoryaccordionpanel shortcode in all versions up to 1.0, exploitable by authenticated attackers...

7.5CVSS6.7AI score0.00074EPSS
Exploits0References3
Veracode
Veracode
added 2025/10/15 7:59 a.m.4 views

Improper Access Control

vite is vulnerable to improper access control. The vulnerability is due to files starting with the same name as those in the public directory being served while bypassing the server.fs settings, which allows an attacker to access restricted files when the Vite dev server is exposed to the network...

5.3CVSS7AI score0.01434EPSS
Exploits1References6Affected Software2
NVD
NVD
added 2025/10/15 2:15 a.m.4 views

CVE-2024-13991

Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supply arbitrary file paths to the fullPath parameter of the /fileDownload?action=downloadBackupFile endpoint and retrieve files from the server filesystem. VulnCheck has observed...

8.7CVSS0.00552EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/13 8:30 p.m.6 views

CVE-2025-62364 text-generation-webui allows arbitrary file read via symbolic link upload

text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path. When the...

6.2CVSS0.0009EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-16390

Malware in sbrugna...

7.5CVSS7.5AI score0.0028EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-1926

Malware in sbrugna...

7.5CVSS7.5AI score0.003EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-0456

Malware in sbrugna...

7.5CVSS7.5AI score0.00381EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2012-2547

Malware in sbrugna...

10CVSS6.3AI score0.04199EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-11481

Malware in sbrugna...

6.5CVSS6.6AI score0.00271EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-28791

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.00571EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-27519

Malicious code in bioql PyPI...

5.5CVSS5AI score0.00133EPSS
Exploits0References2
Rows per page
Query Builder