Lucene search
K

7 matches found

CNNVD
CNNVD
added 2025/07/16 12:0 a.m.2 views

emlog 安全漏洞

emlog is emlog open source a PHP and MySQL based CMS website building system. A security vulnerability exists in emlog pro-2.5.17 and earlier versions, which stems from insufficient cleanup of the file upload feature and could lead to an authenticated user uploading a malicious svg file to execut...

5.4CVSS6.7AI score0.00106EPSS
Exploits1References1
OSV
OSV
added 2024/06/21 4:15 p.m.1 views

CVE-2024-35778

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John West Slideshow SE PHP Local File Inclusion.This issue affects Slideshow SE: from n/a through 2.5.17...

8.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/06/21 12:15 p.m.1 views

CVE-2024-35769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in John West Slideshow SE allows Stored XSS.This issue affects Slideshow SE: from n/a through 2.5.17...

4.8CVSS5.8AI score0.0022EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/06/21 12:0 a.m.2 views

WordPress plugin Slideshow SE path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

8.8CVSS6.8AI score0.00805EPSS
Exploits0References2
Akamai Blog
Akamai Blog
added 2018/08/23 4:30 p.m.100 views

Apache Struts Vulnerability CVE-2018-11776

On Wednesday, August 22nd, the Apache team patched another vulnerability in the Apache Struts2 framework. Apache Struts is an open-source web application framework for developing Java web applications. The vulnerability exists when these conditions are met: 1. The alwaysSelectFullNamespace flag...

7.6AI score0.94431EPSS
Exploits41
Positive Technologies
Positive Technologies
added 2018/04/26 12:0 a.m.3 views

PT-2018-3917 · D Link · D-Link Dir-615

Name of the Vulnerable Software and Affected Versions: D-Link DIR-615 version 2.5.17 Description: The issue is related to the lack of proper sanitization of special elements used in an operating system command, allowing remote code execution. This can be exploited by an attacker to execute...

9CVSS7.5AI score0.02373EPSS
Exploits1References3
Patchstack
Patchstack
added 2018/04/05 12:0 a.m.9 views

WordPress My Calendar plugin <=2.5.16 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found in WordPress My Calendar plugin versions =2.5.16. Solution Update the WordPress My Calendar plugin to the latest available version at least 2.5.17...

1.8AI score
Exploits0References1Affected Software1
Rows per page
Query Builder