Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:31 p.m.2 views

CVE-2023-4304

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0...

3.8CVSS6.7AI score0.00236EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.2 views

PT-2025-38262

Name of the Vulnerable Software and Affected Versions Dragonfly versions prior to 2.1.0 Description Dragonfly is a P2P-based file distribution and image acceleration system. Prior to version 2.1.0, the first return value of a function is dereferenced even when the function returns an error,...

9.9CVSS9.1AI score0.06448EPSS
Exploits11References45
OSV
OSV
added 2025/05/15 8:15 p.m.1 views

CVE-2024-10009

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

4.1CVSS5.8AI score0.00188EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.3 views

PT-2024-38529 · Ays · Ayswp Chatbot

Name of the Vulnerable Software and Affected Versions: The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin versions prior to 2.1.0 Description: The issue allows unauthenticated users to obtain the Open AI API Key. This is due to the disclosure of the Open AI API Key in the...

7.5CVSS7AI score0.00412EPSS
Exploits0References6
OSV
OSV
added 2024/01/31 9:15 a.m.1 views

CVE-2023-44312

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Service-Center before 2.1.0 include. Users are recommended to upgrade to version 2.2.0, which fixes the issue...

7.5CVSS5.8AI score0.00063EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/18 12:0 a.m.2 views

PT-2023-18286 · Modoboa · Modoboa

Name of the Vulnerable Software and Affected Versions: modoboa/modoboa versions prior to 2.1.0 Description: The issue is related to weak password requirements in the modoboa/modoboa GitHub repository. Users can set unsafe passwords, such as 1 or HACK. This issue is fixed in version 2.1.0...

9.8CVSS9.2AI score0.00309EPSS
Exploits1References10
OSV
OSV
added 2023/04/06 7:15 a.m.1 views

CVE-2023-28046

Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges...

7.1CVSS7.2AI score0.00105EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/12 10:15 a.m.3 views

CVE-2022-38179

JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack...

6.1CVSS5.8AI score0.00004EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2022/08/12 12:0 a.m.3 views

JetBrains Ktor framework 安全漏洞

JetBrains Ktor framework is a web application framework from the Czech company JetBrains. A security vulnerability exists in JetBrains Ktor framework versions prior to 2.1.0, which stems from vulnerability to reflected file download attacks...

6.1CVSS6.2AI score0.00004EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.4 views

Stormshield SES Evolution 授权问题漏洞

Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from a vulnerability that allows some security policies to be read while accessing a computer with the management console installed, a...

5.7CVSS5.9AI score0.00087EPSS
Exploits0References2
OSV
OSV
added 2018/07/30 4:29 p.m.1 views

CVE-2018-9065

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and...

7.5CVSS5.8AI score
Exploits0References1
CNVD
CNVD
added 2017/09/13 12:0 a.m.3 views

Eclipse Kura Command Execution Vulnerability

Eclipse Kura is an OSGi-based M2M service gateway application framework from the Eclipse Foundation. A security vulnerability exists in versions of Eclipse Kura prior to 2.1.0. An attacker could exploit the vulnerability to log in to the device, execute commands, or take control of the device...

10CVSS9.5AI score0.00373EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/19 12:0 a.m.3 views

WordPress Easy Modal Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Easy Modal plugin is one of the pop-up window plugin . A SQL injection vulnerability exists in the...

7.2CVSS7.3AI score0.00511EPSS
Exploits1References1
Rows per page
Query Builder