Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:57 a.m.10 views

CVE-2023-4404

The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'updatecoreuser' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the...

9.8CVSS6.2AI score0.00296EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-5311

Malware in sbrugna...

9.8CVSS6.4AI score0.62715EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2010-5310

Malware in sbrugna...

9.8CVSS6.4AI score0.68643EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/08/23 8:13 p.m.3 views

CVE-2010-20113

EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the...

9.8CVSS7.9AI score0.62715EPSS
Exploits1References1
NVD
NVD
added 2025/08/21 8:15 p.m.16 views

CVE-2010-20121

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD Change Working Directory command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack...

9.8CVSS0.68643EPSS
Exploits1References8
ATTACKERKB
ATTACKERKB
added 2025/08/21 8:10 p.m.1 views

CVE-2010-20113

EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the...

9.8CVSS6.2AI score0.62715EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/08/21 8:10 p.m.7 views

CVE-2010-20113 EasyFTP Server list.html path Stack Buffer Overflow

EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the...

9.3CVSS0.62715EPSS
Exploits1References3
CVE
CVE
added 2025/08/21 8:10 p.m.14 views

CVE-2010-20121

CVE-2010-20121 affects EasyFTP Server up to version 1.7.0.11. It describes a stack-based buffer overflow in the FTP CWD command parser, allowing remote code execution without authentication due to anonymous access by default. The flaw’s root cause is improper input length validation for CWD, lead...

9.8CVSS8.4AI score0.68643EPSS
Exploits1References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/08/21 8:10 p.m.4 views

CVE-2010-20121

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD Change Working Directory command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack...

9.8CVSS6.6AI score0.68643EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/21 8:10 p.m.2 views

CVE-2010-20121 EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD Change Working Directory command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack...

9.3CVSS8.4AI score0.68643EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/08/21 12:0 a.m.3 views

PT-2025-34289 · Undefined · Undefined

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD Change Working Directory command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack...

9.3CVSS8.5AI score0.68643EPSS
Exploits1References9
OSV
OSV
added 2023/08/23 2:15 a.m.1 views

CVE-2023-4404

The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'updatecoreuser' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the...

9.8CVSS7.3AI score
Exploits0References2
CNNVD
CNNVD
added 2023/08/23 12:0 a.m.5 views

WordPress Plugin Donation Forms by Charitable 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS8.4AI score0.00296EPSS
Exploits1References3
Metasploit
Metasploit
added 2016/02/03 11:54 p.m.92 views

NETGEAR ProSafe Network Management System 300 Arbitrary File Upload

Netgear's ProSafe NMS300 is a network management utility that runs on Windows systems. The application has multiple vulnerabilities that can allow an unauthenticated remote attacker to execute code as SYSTEM user. Vulnerabilities include authentication bypass, SQL injection, arbitrary file upload...

9.8CVSS8.7AI score0.80313EPSS
Exploits8
Metasploit
Metasploit
added 2010/07/27 2:25 a.m.14 views

EasyFTP Server list.html path Stack Buffer Overflow

This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11 and earlier. EasyFTP fails to check input size when parsing the 'path' parameter supplied to an HTTP GET request, which leads to a stack based buffer overflow. EasyFTP allows anonymous access by default; valid credentia...

7.5AI score
Exploits0
Rows per page
Query Builder