CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

42010 matches found

Snyk•added 2025/12/09 5:19 p.m.•7 views

Arbitrary Code Injection

Overview neuron-core/neuron-ai is a The PHP Agentic Framework. Affected versions of this package are vulnerable to Arbitrary Code Injection via the validation based on the first keyword e.g., SELECT and a forbidden-keyword list does not block file-writing constructs such in the MySQLSelectTool. A...

8.8CVSS6.5AI score0.00289EPSS

SaveExploits0References2

EUVD•added 2025/12/09 5:12 p.m.•21 views

EUVD-2025-202179

Elysia affected by arbitrary code injection through cookie config...

7.5CVSS6.2AI score0.00807EPSS

SaveExploits1References8

NVD•added 2025/12/09 4:18 p.m.•16 views

CVE-2025-66533

Improper Control of Generation of Code 'Code Injection' vulnerability in Liquid Web / StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through 4.13.1...

6.5CVSS0.00305EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:18 p.m.•22 views

CVE-2025-63068

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in sevenspark Contact Form 7 – Dynamic Text Extension contact-form-7-dynamic-text-extension allows Code Injection.This issue affects Contact Form 7 – Dynamic Text Extension: from n/a through = 5.0.5...

5.3CVSS0.00281EPSS

SaveExploits0References1

osv_cve•added 2025/12/09 4:17 p.m.•20 views

CVE-2024-56839

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.6CVSS7.9AI score0.00637EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•20 views

CVE-2024-56839

8.6CVSS0.00637EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•21 views

CVE-2024-56840

7.5CVSS0.00637EPSS

SaveExploits0References1

osv_cve•added 2025/12/09 4:17 p.m.•17 views

CVE-2024-56835

8.7CVSS7.9AI score0.00507EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•22 views

CVE-2024-56835

8.8CVSS0.00507EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 3:03 p.m.•8 views

CVE-2025-66533 WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Liquid Web / StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through 4.13.1...

6.5CVSS5.9AI score0.00305EPSS

SaveExploits0References1

CVE•added 2025/12/09 3:03 p.m.•38 views

CVE-2025-66533

CVE-2025-66533 is an authentication‑free vulnerability in GiveWP (WordPress donation plugin) that enables arbitrary shortcode execution through GiveWP versions affected up to 4.13.1. The issue is confirmed in the Wordfence Intelligence vulnerability tracking and is categorized as Improper Control...

6.5CVSS5.9AI score0.00305EPSS

SaveIn wildExploits0References1

Cvelist•added 2025/12/09 3:03 p.m.•47 views

CVE-2025-66533 WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Liquid Web / StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through 4.13.1...

6.5CVSS0.00305EPSS

SaveExploits0References1

CVE•added 2025/12/09 2:52 p.m.•75 views

CVE-2025-63068

CVE-2025-63068 : Affected is the WordPress plugin Contact Form 7 Dynamic Text Extension . The issue is an improper neutralization of script-related HTML tags in the plugin, leading to a Basic XSS / Code Injection vulnerability. Affected versions are the plugin up to and including 5.0.3 (from the ...

5.3CVSS5.8AI score0.00281EPSS

SaveExploits0References1

EUVD•added 2025/12/09 2:52 p.m.•24 views

EUVD-2025-201961

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in sevenspark Contact Form 7 Dynamic Text Extension contact-form-7-dynamic-text-extension allows Code Injection.This issue affects Contact Form 7 Dynamic Text Extension: from n/a through = 5.0.3...

5.3CVSS6AI score0.00281EPSS

SaveExploits0References2

CVE•added 2025/12/09 10:44 a.m.•48 views

CVE-2024-56840

The CVE-2024-56840 issue affects Siemens RUGGEDCOM ROX II family devices (and older ROX MX/RX variants) with all versions prior to 2.17.0. Under certain conditions, IPsec may allow code injection, enabling an attacker to execute arbitrary code as root on the affected device. Several connected sou...

7.5CVSS7.9AI score0.00637EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 10:44 a.m.•8 views

CVE-2024-56840

7.5CVSS7.9AI score0.00637EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•51 views

CVE-2024-56840

7.5CVSS0.00637EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•8 views

CVE-2024-56839

8.6CVSS7.9AI score0.00637EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•42 views

CVE-2024-56839

CVE-2024-56839 affects Siemens RUGGEDCOM ROX II family (ROX II, MX5000/MX5000RE, RX1400/1500/1501/1510/1511/1512/1524/1536 and ROX 5000) with code injection possible when VRF is used. The root cause is injection in VRF-enabled configurations, enabling arbitrary code execution as root. Impact is h...

8.6CVSS7.9AI score0.00637EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2025/12/09 10:44 a.m.•36 views

CVE-2024-56839

8.6CVSS0.00637EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by