Lucene search
+L

4507 matches found

Cvelist
Cvelist
added 2026/02/03 2:8 p.m.31 views

CVE-2026-25010 WordPress Share This Image plugin <= 2.09 - Broken Access Control vulnerability

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3CVSS0.00176EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/03 2:8 p.m.2 views

CVE-2026-25010 WordPress Share This Image plugin <= 2.09 - Broken Access Control vulnerability

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3CVSS5.3AI score0.00176EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/03 2:8 p.m.16 views

CVE-2026-25010

CVE-2026-25010 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Share This Image (share-this-image) affecting version

5.3CVSS5.3AI score0.00176EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/03 2:8 p.m.8 views

EUVD-2026-5255

Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through = 2.09...

5.3CVSS5.3AI score0.00176EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.11 views

PT-2026-6244

Name of the Vulnerable Software and Affected Versions ILLID Share This Image versions through 2.09 Description An authorization issue exists in ILLID Share This Image’s ‘share-this-image’ functionality. This allows exploitation due to incorrectly configured access control security levels...

5.3CVSS5.4AI score0.00176EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.8 views

WordPress plugin Share This Image 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/02 9:17 a.m.9 views

CVE-2026-25154

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

6.1CVSS5.3AI score0.00278EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/30 10:15 p.m.14 views

CVE-2026-25154

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

6.1CVSS0.00278EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/01/30 9:59 p.m.35 views

CVE-2026-25154 LocalSend has Stored XSS in Web Share Interface via Filename

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

6.1CVSS0.00278EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/30 9:59 p.m.48 views

CVE-2026-25154

CVE-2026-25154 affects LocalSend (versions up to and including 1.17.0). The Red Hat/NVD/OSV/CVE list entries describe a Stored XSS vulnerability in the Web Share Interface via the filename, with the client-side logic in app/assets/web/main.js and a patch in commit 8f3cec85aa29b2b13fed9b2f8e499e1a...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/30 9:59 p.m.4 views

CVE-2026-25154

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/30 9:59 p.m.4 views

CVE-2026-25154 LocalSend has Stored XSS in Web Share Interface via Filename

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

6.1CVSS5.3AI score0.00278EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/01/30 9:59 p.m.8 views

EUVD-2026-5001

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/30 9:59 p.m.10 views

CVE-2026-25154 LocalSend has Stored XSS in Web Share Interface via Filename

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/30 12:0 a.m.13 views

PT-2026-5495

Name of the Vulnerable Software and Affected Versions LocalSend versions up to and including 1.17.0 Description LocalSend is an application enabling file and message sharing with nearby devices on a local network, without internet access. When a user initiates a "Share via Link" session, the...

6.1CVSS5.8AI score0.00278EPSS
SaveExploits1References8
OSV
OSV
added 2026/01/28 8:16 p.m.5 views

CVE-2025-13985

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/28 8:16 p.m.11 views

CVE-2025-13985

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.3CVSS0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/28 8:2 p.m.3 views

CVE-2025-13985 Entity Share - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-123

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.9AI score0.00187EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/28 8:2 p.m.5 views

EUVD-2025-206436

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.3CVSS5.9AI score0.00187EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/28 8:2 p.m.5 views

CVE-2025-13985

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.9AI score0.00187EPSS
SaveExploits0References2
Rows per page
Query Builder