Lucene search
+L

541 matches found

CNNVD
CNNVD
added 2025/05/19 12:0 a.m.6 views

WordPress plugin Revy SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS8.9AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/14 12:0 a.m.4 views

PT-2025-16: Disclosure of sensitive data in Booco

The vulnerability was identified in Booco, versions 2.38, 2.39 The discovered vulnerability allows an unauthorized attacker to obtain administrator rights to the system, including access to all its data and functionality. Vulnerability status: Confirmed by vendor Date of vulnerability remediation...

9.3CVSS5.8AI score
SaveExploits0References1
OSV
OSV
added 2025/05/07 3:16 p.m.7 views

CVE-2025-47626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados Submission DOM tracking for Contact Form 7 allows Stored XSS. This issue affects Submission DOM tracking for Contact Form 7: from n/a through 2.0...

4.8CVSS5.8AI score0.00226EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.5 views

WordPress plugin Pays – WooCommerce Payment Gateway 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Pays - A cross-site request forger...

7.1CVSS7.1AI score0.00127EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.7 views

WordPress plugin Business Contact Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6.2AI score0.00214EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/16 5:15 p.m.8 views

CVE-2024-22314

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.8AI score0.00218EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/16 9:15 a.m.3 views

CVE-2023-32197

A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5...

7.5CVSS7.1AI score0.00606EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.5 views

WordPress plugin SKT Skill Bar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6.6AI score0.00252EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/09 3:15 a.m.1 views

DEBIAN-CVE-2025-32464

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sampleconvregsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one...

6.8CVSS6.3AI score0.0072EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/09 12:0 a.m.5 views

HAProxy 安全漏洞

HAProxy is an open source TCP/HTTP load balancing server from the French company HAProxy. The server provides 4-layer and 7-layer proxies and can support tens of thousands of level connections with high efficiency and stability. A security vulnerability exists in HAProxy versions 2.2 through 3.1....

6.8CVSS5.9AI score0.0072EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/04 12:0 a.m.9 views

WordPress plugin Rollbar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS6.4AI score0.00191EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.5 views

WordPress plugin PowerPack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.4CVSS6.7AI score0.00232EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.6 views

WordPress plugin Salesmate Add-On for Gravity Forms SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress...

9.3CVSS9.2AI score0.00481EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.9 views

WordPress plugin Caspio Bridge Custom Database Applications by Caspio 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Caspio Bridge Custom...

6.5CVSS7.5AI score0.00237EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.9 views

WordPress plugin PostmarkApp Email Integrator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in...

4.3CVSS8.3AI score0.00267EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/26 5:15 p.m.4 views

DEBIAN-CVE-2025-30164

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...

6.1CVSS5.3AI score0.00249EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:27 p.m.4 views

WordPress WP Ride Booking plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin WP Ride Booking versions = 2.4...

4.3CVSS6.8AI score0.00197EPSS
SaveExploits0Affected Software1
vulnersOsv
vulnersOsv
added 2025/03/23 3:30 p.m.15 views

au.com.turingg:turingg-files (=0.0.1), au.com.turingg:turingg-mimak (=1.0.0) +875 more potentially affected by CVE-2025-27553 via org.apache.commons:commons-vfs2 (>=2.0 <=2.1)

org.apache.commons:commons-vfs2 MAVEN version =2.0, =0.0.4, =1.0.0, =1.0.0, =3.6.1, =3.11.0, =1.0-alpha-1, =1.0-alpha-1, =0.5, =0.5.1 and more Source cves: CVE-2025-27553 Source advisory: OSV:GHSA-9Q4X-FR4M-JP86...

7.5CVSS6.6AI score0.01277EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2025/03/23 3:30 p.m.18 views

au.com.turingg:turingg-files (=0.0.1), au.com.turingg:turingg-mimak (=1.0.0) +875 more potentially affected by CVE-2025-30474 via org.apache.commons:commons-vfs2 (>=2.0 <=2.1)

org.apache.commons:commons-vfs2 MAVEN version =2.0, =0.0.4, =1.0.0, =1.0.0, =3.6.1, =3.11.0, =1.0-alpha-1, =1.0-alpha-1, =0.5, =0.5.1 and more Source cves: CVE-2025-30474 Source advisory: OSV:GHSA-3936-3GX6-49C4...

5CVSS7.2AI score0.00795EPSS
SaveExploits0
Patchstack
Patchstack
added 2025/03/22 3:37 p.m.7 views

WordPress Are you robot google recaptcha for Wordpress plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Are you robot google recaptcha for wordpress versions = 2.2...

7.1CVSS7.7AI score0.00294EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder