Lucene search
K

14 matches found

NVD
NVD
added 2025/11/07 5:15 a.m.4 views

CVE-2025-12352

The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the copypostimage function in all versions up to, and including, 2.9.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's serv...

9.8CVSS0.00366EPSS
Exploits0References3
CVE
CVE
added 2025/11/07 4:28 a.m.18 views

CVE-2025-12352

The CVE-2025-12352 issue affects the WordPress Gravity Forms plugin, specifically versions up to and including 2.9.20. The vulnerability arises from missing file type validation in the copy_post_image() function, allowing unauthenticated attackers to upload arbitrary files to the affected site’s ...

9.8CVSS7.1AI score0.00366EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/07 4:28 a.m.1 views

CVE-2025-12352 Gravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'

The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the copypostimage function in all versions up to, and including, 2.9.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's serv...

9.8CVSS7.1AI score0.00366EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.2 views

PT-2025-45404

Name of the Vulnerable Software and Affected Versions Gravity Forms versions up to and including 2.9.20 Description The Gravity Forms plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation within the copy post image function. This allows...

9.8CVSS7.7AI score0.00366EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2025/09/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-33798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute v...

6.5CVSS6.7AI score0.00046EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-20307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

9.8CVSS9AI score0.00222EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 4:50 a.m.10 views

CVE-2023-28986

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin = 2.9.20 versions...

8.8CVSS7.1AI score0.00068EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.4 views

PT-2023-22063 · WordPress · Wpaffiliatemgr Affiliates Manager

Name of the Vulnerable Software and Affected Versions: wpaffiliatemgr Affiliates Manager plugin versions = 2.9.20 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions ...

8.8CVSS8.8AI score0.00068EPSS
Exploits0References4
OSV
OSV
added 2023/07/07 6:15 p.m.1 views

CVE-2021-33798

A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file...

6.5CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2023/07/07 6:15 p.m.2 views

UBUNTU-CVE-2021-33798

A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file...

6.5CVSS5.8AI score0.00046EPSS
Exploits1References4
WPVulnDB
WPVulnDB
added 2023/03/29 12:0 a.m.17 views

Affiliates Manager < 2.9.21 - Cross-Site Request Forgery

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin = 2.9.20 versions...

8.8CVSS6.9AI score0.00068EPSS
Exploits0References1Affected Software1
Gentoo Linux
Gentoo Linux
added 2021/07/20 12:0 a.m.64 views

libpano13: Format string vulnerability

Background libpano13 is Helmut Dersch’s panorama toolbox library. Description A format string issue exists within panoFileOutputNamesCreate where unvalidated input is passed directly into the formatter. Impact A remote attacker could entice a user to open a specially crafted file using libpano1...

9.8CVSS9.7AI score0.00222EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2021/04/22 9:7 p.m.99 views

Moderate: Red Hat Security Advisory: Ansible security update (2.9.20)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

5.5CVSS6.9AI score0.00072EPSS
Exploits0References2
OSV
OSV
added 2011/02/22 7:0 p.m.3 views

CVE-2011-0530

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device nbd before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression...

7.6AI score
Exploits0References17
Rows per page
Query Builder