Lucene search
K

19 matches found

Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.4 views

CVE-2025-69386 WordPress RVCFDI para Woocommerce plugin <= 8.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realvirtualmx RVCFDI para Woocommerce rvcfdi-para-woocommerce allows Reflected XSS.This issue affects RVCFDI para Woocommerce: from n/a through = 8.1.8...

7.1CVSS5.3AI score0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.22 views

CVE-2025-69386 WordPress RVCFDI para Woocommerce plugin <= 8.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realvirtualmx RVCFDI para Woocommerce rvcfdi-para-woocommerce allows Reflected XSS.This issue affects RVCFDI para Woocommerce: from n/a through = 8.1.8...

7.1CVSS0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.4 views

ownCloud 安全漏洞

OwnCloud is a personal cloud storage solution provided by the US-based company OwnCloud. Version 8.1.8 of OwnCloud contains a security vulnerability. This vulnerability stems from a username enumeration issue in the share.php endpoint, which may lead to the discovery of user accounts...

9.8CVSS5.8AI score0.00168EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.3 views

CVE-2026-24630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.1.8...

6.5CVSS5.9AI score0.00064EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.3 views

PT-2026-4460

Name of the Vulnerable Software and Affected Versions Stylish Cost Calculator versions through 8.1.8 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This specific instance allow...

6.5CVSS5.4AI score0.00064EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.17 views

CVE-2025-67944 WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Nelio AB Testing: from n/a through = 8.1.8...

9.1CVSS0.00085EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-40749

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00176EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:8 a.m.12 views

CVE-2023-38702

Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8.1.8, the endpoint /knowage/restful-services/dossier/importTemplateFile allows authenticated users to upload template file on the server, but does not need any authorization to ...

9.9CVSS7.3AI score0.00306EPSS
Exploits1References1
NVD
NVD
added 2023/08/04 7:15 p.m.10 views

CVE-2023-38702

Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8.1.8, the endpoint /knowage/restful-services/dossier/importTemplateFile allows authenticated users to upload template file on the server, but does not need any authorization to ...

9.9CVSS9.6AI score0.00306EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/08/04 6:10 p.m.18 views

CVE-2023-38702 Knowage Server vulnerable to path traversal via upload functionality

Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8.1.8, the endpoint /knowage/restful-services/dossier/importTemplateFile allows authenticated users to upload template file on the server, but does not need any authorization to ...

9.9CVSS9.8AI score0.00306EPSS
Exploits1References1
NVD
NVD
added 2023/07/03 7:15 p.m.10 views

CVE-2023-36819

Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems. The endpoint /knowage/restful-services/dossier/importTemplateFile allows authenticated users to download template hosted on the server. However, starting in the 6.x.x branch...

6.5CVSS6.2AI score0.00176EPSS
Exploits1References1
OSV
OSV
added 2022/07/28 6:15 a.m.13 views

CVE-2022-31627

In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfobuffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption...

9.8CVSS9.5AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/07/08 12:0 a.m.183 views

PHP 8.1.x < 8.1.8

The version of PHP installed on the remote host is prior to 8.1.8. It is, therefore, affected by a vulnerability as referenced in the Version 8.1.8 advisory. - In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfobuffer, due to incorrect patch applied to the third party code...

9.8CVSS7.8AI score0.00307EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2022/07/08 12:0 a.m.9 views

PHP 8.1.x < 8.1.8 Security Update (Jul 2022) - Linux

PHP released new versions which include a security fix. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

9.8CVSS8.6AI score0.00307EPSS
Exploits1References2
ALT Linux
ALT Linux
added 2021/12/16 12:0 a.m.33 views

Security fix for the ALT Linux 10 package grafana version 8.1.8-alt1

8.1.8-alt1 built Dec. 16, 2021 Alexey Shabalin in task 291697 Dec. 9, 2021 Alexey Shabalin - 8.1.8 Fixes: CVE-2021-43798, CVE-2021-39226...

6.8CVSS7.6AI score0.94438EPSS
Exploits45
0day.today
0day.today
added 2019/11/30 12:0 a.m.120 views

OwnCloud 8.1.8 Username Disclosure Vulnerability

OwnCloud version 8.1.8 suffers from a username disclosure vulnerability. OwnCloud version 8.1.8 stable are vulnerable to recovery all username login list. PoC: 1. Create an account in OwnCloud 2. Intercept connection with Burp 3. Share a file, typing anything...

7.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/11/10 12:0 a.m.20 views

Ubuntu 6.06 LTS / 6.10 : postgresql-8.1 regression (USN-417-3)

USN-417-2 fixed a severe regression in the PostgreSQL server that was introduced in USN-417-1 and caused some valid queries to be aborted with a type error. This update fixes a similar but much less prominent error. At the same time, PostgreSQL is updated to version 8.1.8, which fixes a range of...

5.5AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2007/03/14 5:7 a.m.26 views

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS. Two flaw...

8.5CVSS6AI score0.02102EPSS
Exploits0References4
Ubuntu
Ubuntu
added 2007/02/13 12:40 a.m.53 views

USN-417-3: PostgreSQL regression

USN-417-2 fixed a severe regression in the PostgreSQL server that was introduced in USN-417-1 and caused some valid queries to be aborted with a type error. This update fixes a similar but much less prominent error. At the same time, PostgreSQL is updated to version 8.1.8, which fixes a range of...

5.4AI score
Exploits0
Rows per page
Query Builder