Lucene search
+L

648 matches found

CNNVD
CNNVD
added 2023/11/09 12:00 a.m.7 views

PostgreSQL Security Vulnerabilities

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, etc. A security vulnerability exists in PostgreSQL. A security vulnerability...

4.3CVSS8AI score0.02775EPSS
SaveExploits0References30
CNNVD
CNNVD
added 2023/11/07 12:00 a.m.10 views

Veeam ONE Security Vulnerability

Veeam ONE is a suite of IT monitoring and reporting tools from Veeam USA. The product supports features such as backup monitoring, operational status monitoring of virtual and physical environments. A security vulnerability exists in Veeam ONE version 12 that originates from allowing an...

9.8CVSS6.4AI score0.11806EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/31 9:15 a.m.11 views

CVE-2023-5437

The WP fade in text news plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

6.5CVSS5.9AI score0.0079EPSS
SaveExploits1References3
OSV
OSV
added 2023/10/31 9:15 a.m.11 views

CVE-2023-5435

The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

6.5CVSS5.8AI score0.0079EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.10 views

WordPress Plugin Up down image slideshow gallery SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS7.7AI score0.0079EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.14 views

WordPress Plugin WP fade in text news SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WP fade in text news A SQL...

8.8CVSS7.8AI score0.0079EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/10/27 12:00 a.m.13 views

VMware Tools Security Vulnerability

VMware Tools is an enhancement tool that comes with VMware's VMWare virtual machines. It is a driver provided by VMware to enhance the performance of virtual graphics cards and hard disks, as well as to synchronize the clocks of the virtual machine with the host computer. A security vulnerability...

7.8CVSS6.7AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/26 12:00 a.m.15 views

PT-2023-26946 · Ashlar Vellum · Ashlar-Vellum Cobalt +4

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share version 12 SP0 Build 1204.77 Description: The affected applications lack proper validation of user-supplied data when parsing XE files, which could lead to an out-of-bounds write. ...

7.8CVSS7.9AI score0.00202EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2023/10/25 6:17 p.m.8 views

CVE-2023-46010

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the adminsafe.php component...

9.8CVSS6.1AI score0.0116EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/25 6:17 p.m.9 views

CVE-2023-46010

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the adminsafe.php component...

9.8CVSS6AI score0.0116EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/17 12:00 a.m.13 views

PT-2023-6269 · Oracle · Oracle Applications Framework +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the Personalization component of the Oracle Applications Framework product. This allows an unauthenticated attacker...

6.4CVSS5.2AI score0.00327EPSS
SaveExploits0References4
OSV
OSV
added 2023/10/10 1:15 a.m.10 views

CVE-2023-44847

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...

7.2CVSS6.1AI score0.00929EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.11 views

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version v.12.8, which originates from allowing an attacker to execute arbitrary code via the...

8.1CVSS7.7AI score0.00631EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/27 3:19 p.m.10 views

CVE-2023-43216

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...

9.8CVSS5.8AI score0.01155EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.13 views

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version V12.9, which originates from an arbitrary file write vulnerability in adminsmtp.php...

9.8CVSS6.9AI score0.01155EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.11 views

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version V12.9, which originates from an arbitrary file write vulnerability in adminping.php...

9.8CVSS6.9AI score0.01155EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.14 views

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version V12.9, which is caused by an arbitrary file write vulnerability in adminweixin.php...

9.8CVSS6.9AI score0.01155EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/09/26 12:00 a.m.16 views

PT-2023-29143 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. It affects the component admin weixin.php, allowing for potential unauthorized file modifications. Recommendations: For SeaCMS version 12.9,...

9.8CVSS7.1AI score0.01155EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/09/26 12:00 a.m.14 views

PT-2023-29142 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. It affects the component admin smtp.php. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin smtp.php component until...

9.8CVSS7.3AI score0.01155EPSS
SaveExploits1References4
OSV
OSV
added 2023/09/25 11:15 p.m.10 views

CVE-2023-43278

A Cross-Site Request Forgery CSRF in adminmanager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account...

8.8CVSS5.8AI score0.00238EPSS
SaveExploits0References3
Rows per page
Query Builder