Lucene search
+L

625 matches found

RedhatCVE
RedhatCVE
added 2025/03/07 2:3 a.m.17 views

CVE-2025-27668

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012...

9.8CVSS7.1AI score0.00617EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/05 6:15 a.m.24 views

CVE-2025-27668

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012...

9.8CVSS0.00617EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/05 12:0 a.m.24 views

CVE-2025-27668

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012...

0.00617EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/05 12:0 a.m.8 views

CVE-2025-27668

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012...

7.2AI score0.00617EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/05 12:0 a.m.60 views

CVE-2025-27668

CVE-2025-27668 affects Vasion Print (formerly PrinterLogic) SaaS-based cloud service prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923, where an arbitrary content inclusion vulnerability can be triggered via an iframe (OVERVIEW-20230524-0012). The CVSS v3.1 base score is 9.8 (CRI...

9.8CVSS7.2AI score0.00617EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2020-12108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. CVE-2020-12108 Note that Nessus relies on the presence of the package as...

6.5CVSS6.7AI score0.02698EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.19 views

CVE-2025-23515 WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

6.5CVSS0.00373EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.8 views

CVE-2025-23515 WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

6.5CVSS8.6AI score0.00373EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/28 12:0 a.m.11 views

PT-2025-9135 · Pwndoc · Pwndoc

Name of the Vulnerable Software and Affected Versions: PwnDoc versions prior to 1.2.0 Description: The issue concerns the backup restore functionality, which allows an administrator to import raw data into the database, including Path Traversal ../ sequences. This is problematic for the template...

6.5CVSS7.1AI score0.01079EPSS
SaveExploits1References14
Vulnrichment
Vulnrichment
added 2025/02/18 7:54 p.m.6 views

CVE-2025-22657 WordPress Atarim plugin <= 4.0.9 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Vito Peleg Atarim allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Atarim: from n/a through 4.0.9...

7.5CVSS7.5AI score0.00357EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/18 7:54 p.m.36 views

CVE-2025-22657 WordPress Atarim plugin <= 4.0.9 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atarim: from n/a through = 4.0.9...

7.5CVSS0.00357EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/16 10:17 p.m.18 views

CVE-2025-22291 WordPress LTL Freight Quotes – Worldwide Express Edition plugin <= 5.0.20 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a...

5.3CVSS0.00289EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/14 12:44 p.m.19 views

CVE-2025-23534 WordPress WPLingo plugin <= 1.1.2 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Mark Winiarski WPLingo wplingo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLingo: from n/a through = 1.1.2...

6.5CVSS0.00389EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/14 12:44 p.m.7 views

CVE-2025-23534 WordPress WPLingo plugin <= 1.1.2 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Mark Winiarski WPLingo wplingo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLingo: from n/a through = 1.1.2...

6.5CVSS7.2AI score0.00389EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/12 7:54 a.m.8 views

WordPress LTL Freight Quotes – Worldwide Express Edition plugin <= 5.0.20 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin LTL Freight Quotes – Worldwide Express Edition versions = 5.0.20...

5.3CVSS7AI score0.00289EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 10:47 p.m.11 views

CVE-2022-36035

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration like Git repositories, and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allow...

7.8CVSS7.1AI score0.00306EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 9:22 p.m.14 views

CVE-2022-2527

An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2.which allowed an authenticated attacker to inject arbitrary content. A victim...

8CVSS6.2AI score0.00853EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/03 4:22 p.m.7 views

WordPress Atarim plugin <= 4.0.9 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Atarim versions = 4.0.9...

7.5CVSS7AI score0.00357EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/02/03 2:22 p.m.48 views

CVE-2025-23527

CVE-2025-23527 corresponds to WC Wallet: Missing Authorization vulnerability. Red Hat/NVD entries describe a Missing Authorization issue that allows accessing functionality not properly constrained by ACLs, affecting WC Wallet versions up to 2.2.0. Vuln enrichment explicitly labels this as an Arb...

6.5CVSS7.2AI score0.0044EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/03 2:22 p.m.29 views

CVE-2025-23527 WordPress WC Wallet plugin <= 2.2.0 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in hemnathmouli WC Wallet wc-wallet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WC Wallet: from n/a through = 2.2.0...

6.5CVSS0.0044EPSS
SaveExploits0References1
Rows per page
Query Builder