Lucene search
+L

5218 matches found

CVE
CVE
added 2025/03/04 3:37 a.m.64 views

CVE-2024-13686

CVE-2024-13686 affects VW Storefront for WordPress (versions

4.3CVSS6.6AI score0.00281EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-3653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and...

3.5CVSS6AI score0.01887EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2018-2637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JMX. Supported versions that are affected are Java SE: 6u171,...

7.4CVSS6.5AI score0.04618EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2019-2738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Compiling. Supported versions that are affected are 5.6.44 and prior, 5.7.26...

3.5CVSS5.3AI score0.01628EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-3139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u201,...

3.1CVSS6.7AI score0.05243EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-2800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, JRockit component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162;...

4.2CVSS5.8AI score0.0591EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2018-3081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Client component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and...

5CVSS5.7AI score0.02444EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2017-3265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Packaging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34...

5.6CVSS6.1AI score0.0136EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.23 views

Linux Distros Unpatched Vulnerability : CVE-2019-9637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possib...

7.5CVSS6.8AI score0.06881EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/03/03 7:56 p.m.23 views

MinIO allows an SFTP authentication bypass due to improperly trusted SSH key

Summary A bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. Details On a MinIO server with SFTP access configured and using LDAP as an external identity provider, MinIO supports SSH key based authentication fo...

8.2CVSS7.3AI score0.0056EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/03/03 7:56 p.m.82 views

GHSA-WC79-7X8X-2P58 MinIO allows an SFTP authentication bypass due to improperly trusted SSH key

Summary A bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. Details On a MinIO server with SFTP access configured and using LDAP as an external identity provider, MinIO supports SSH key based authentication fo...

6.3CVSS7.6AI score0.0056EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/03/03 4:24 a.m.8 views

CVE-2024-13746

The Booking Calendar and Notification plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on the wpcballbookings, wpcbupdatebookingpost, and wpcbdeleteposts functions in all versions up to, and including, 4.0.3. This makes it...

6.5CVSS6.9AI score0.00335EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/02 10:25 a.m.21 views

CVE-2024-10860

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized submission of data due to a missing capability check on the submituninstallreasonaction function in all versions up to, and including, 2.19.0. This makes it possible for authenticated attackers,...

4.3CVSS6.4AI score0.00258EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/01 12:15 p.m.15 views

CVE-2025-1404

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ayssccpreportsusersearch function in all versions up to, and including, 4.4.7. This makes it possible for unauthenticated attackers to...

5.3CVSS0.00385EPSS
SaveExploits0References5
CVE
CVE
added 2025/03/01 11:22 a.m.87 views

CVE-2025-1404

CVE-2025-1404 affects the WordPress plugin Secure Copy Content Protection and Content Locking . The vulnerability is due to a missing capability check in the function ays_sccp_reports_user_search() and affects all versions up to 4.4.7. This allows unauthenticated attackers to retrieve a list of r...

5.3CVSS6.9AI score0.00385EPSS
SaveExploits0References5
NVD
NVD
added 2025/03/01 7:15 a.m.12 views

CVE-2025-1502

The IP2Location Redirection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'downloadip2locationredirectionbackup' AJAX action in all versions up to, and including, 1.33.3. This makes it possible for unauthenticated attackers to download...

5.3CVSS0.00287EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/01 6:39 a.m.66 views

CVE-2025-1502

CVE-2025-1502 affects the WordPress plugin IP2Location Redirection (versions up to and including 1.33.3). The issue is a missing capability check on the AJAX action download_ip2location_redirection_backup , allowing unauthenticated attackers to download the plugin’s settings. Public sources in th...

5.3CVSS6.8AI score0.00287EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/01 12:00 a.m.6 views

WordPress plugin IP2Location Redirection 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS7.7AI score0.00287EPSS
SaveExploits0References4
NVD
NVD
added 2025/02/28 9:15 p.m.49 views

CVE-2025-27414

MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. On a MinIO server with SFTP...

8.2CVSS0.0056EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/28 10:15 a.m.17 views

CVE-2024-10860

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized submission of data due to a missing capability check on the submituninstallreasonaction function in all versions up to, and including, 2.19.0. This makes it possible for authenticated attackers,...

4.3CVSS0.00258EPSS
SaveExploits0References2
Rows per page
Query Builder