Lucene search
+L

1679 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•2 views

CVE-2025-47617: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Stored XSS.This issue affects WP Front User Submit / Front Editor: from n/a through = 5.0.6...

5.9CVSS5.8AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•12 views

WordPress plugin WP Front User Submit / Front Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6.1AI score0.00264EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•6 views

CVE-2025-3992: Buffer Copy without Checking Size of Input

A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlwds. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been...

9CVSS8AI score0.01042EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•17 views

TOTOLINK N150RT 安全漏洞

The TOTOLINK N150RT is a wireless router from TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that stems from improper handling of the parameter submit-url in the file /boafrm/formWsc. No details of the vulnerability are provided at this time...

9CVSS7.3AI score0.01042EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•4 views

CVE-2025-3993: Buffer Copy without Checking Size of Input

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclos...

9CVSS8AI score0.01042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•1 views

CVE-2025-3991: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has...

9CVSS8AI score0.01042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/27 12:00 a.m.•0 views

CVE-2025-3990: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The...

9CVSS8AI score0.01042EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/27 12:00 a.m.•11 views

TOTOLINK N150RT 安全漏洞

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that originates from the parameter submit-url in the file /boafrm/formWdsEncrypt failing to correctly validate the length and size of the input data,...

9CVSS8AI score0.01042EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/04/27 12:00 a.m.•13 views

TOTOLINK N150RT 安全漏洞

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that originates from the failure of the parameter submit-url in the file /boafrm/formWlwds to correctly validate the length and size of the input data,...

9CVSS8AI score0.01042EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/04/27 12:00 a.m.•13 views

TOTOLINK N150RT 安全漏洞

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that originates from the parameter submit-url in file /boafrm/formVlan failing to properly validate the length and size of the input data, which can be...

9CVSS8AI score0.01042EPSS
SaveExploits1References6
OSV
OSV
•added 2025/04/16 3:15 p.m.•11 views

DEBIAN-CVE-2025-22050

In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rxcomplete Missing usbnetgoingaway Check in Critical Path. The usbsubmiturb function lacks a usbnetgoingaway validation, whereas usbnetqueueskb includes this check. This inconsistency creates a race conditio...

4.7CVSS5.5AI score0.00196EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/16 3:15 p.m.•14 views

UBUNTU-CVE-2025-22050

In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rxcomplete Missing usbnetgoingaway Check in Critical Path. The usbsubmiturb function lacks a usbnetgoingaway validation, whereas usbnetqueueskb includes this check. This inconsistency creates a race conditio...

4.7CVSS5.8AI score0.00196EPSS
SaveExploits0References40
RedhatCVE
RedhatCVE
•added 2025/04/13 9:06 a.m.•28 views

CVE-2025-32589

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in odude Flexi – Guest Submit flexi allows PHP Local File Inclusion.This issue affects Flexi – Guest Submit: from n/a through = 4.28...

8.1CVSS7.2AI score0.01003EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/11 9:15 a.m.•30 views

CVE-2025-32589

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in odude Flexi – Guest Submit flexi allows PHP Local File Inclusion.This issue affects Flexi – Guest Submit: from n/a through = 4.28...

8.1CVSS0.01003EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/11 8:42 a.m.•69 views

CVE-2025-32589

CVE-2025-32589 affects the WordPress plugin

8.1CVSS7.2AI score0.01003EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/11 8:42 a.m.•43 views

CVE-2025-32589 WordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in odude Flexi – Guest Submit flexi allows PHP Local File Inclusion.This issue affects Flexi – Guest Submit: from n/a through = 4.28...

8.1CVSS0.01003EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/11 8:42 a.m.•12 views

CVE-2025-32589 WordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in odude Flexi – Guest Submit allows PHP Local File Inclusion. This issue affects Flexi – Guest Submit: from n/a through 4.28...

8.1CVSS8.3AI score0.01003EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/11 12:00 a.m.•0 views

CVE-2025-32589: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in odude Flexi – Guest Submit flexi allows PHP Local File Inclusion.This issue affects Flexi – Guest Submit: from n/a through = 4.28...

8.1CVSS5.8AI score0.01003EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/06 12:00 a.m.•21 views

PT-2025-18023 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability has been found in the TOTOLINK N150RT, affecting some unknown functionality of the file /boafrm/formVlan. The manipulation of the submit-url argument leads to buffe...

9CVSS8.7AI score0.01042EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2025/04/06 12:00 a.m.•30 views

PT-2025-18030 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical issue affects the processing of the file /boafrm/formWsc. The manipulation of the submit-url argument leads to a buffer overflow. This issue can be exploited remotely...

9CVSS8.8AI score0.01042EPSS
SaveExploits1References16
Rows per page
Query Builder