Lucene search
K

19163 matches found

Cvelist
Cvelist
added 2026/01/06 12:0 a.m.26 views

CVE-2025-60262

An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote...

0.00491EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/01/05 5:7 p.m.6 views

CVE-2025-10933 Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds read

An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads...

5.3CVSS6.5AI score0.00226EPSS
Exploits0References1
NVD
NVD
added 2026/01/05 2:15 p.m.3 views

CVE-2023-51513

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS0.00135EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 1:30 p.m.4 views

CVE-2023-51513 WordPress Geo Controller plugin <= 8.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS6AI score0.00135EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/05 1:30 p.m.3 views

EUVD-2023-56226

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS5.9AI score0.00135EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/05 1:30 p.m.24 views

CVE-2023-51513 WordPress Geo Controller plugin <= 8.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS0.00135EPSS
Exploits0References1
CVE
CVE
added 2026/01/05 1:30 p.m.12 views

CVE-2023-51513

CVE-2023-51513 affects the WordPress Geo Controller plugin (

6.5CVSS6AI score0.00135EPSS
Exploits0References1
NVD
NVD
added 2026/01/05 1:15 a.m.4 views

CVE-2025-15449

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be...

9.1CVSS0.00641EPSS
Exploits1References4
OSV
OSV
added 2026/01/05 1:15 a.m.4 views

CVE-2025-15449

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be...

9.1CVSS5.6AI score0.00641EPSS
Exploits1References4
EUVD
EUVD
added 2026/01/05 12:32 a.m.4 views

EUVD-2026-0921

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be...

5.5CVSS5.4AI score0.00641EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/05 12:32 a.m.26 views

CVE-2025-15449 cld378632668 JavaMall MinioController.java delete path traversal

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be...

5.5CVSS0.00641EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.4 views

mall 路径遍历漏洞

mall is a macro individual developer of a set of e-commerce system, including the front mall system and backend management system. mall 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0 and previous versions of the path traversal vulnerability exists, the vulnerability stems from the file...

9.1CVSS5.5AI score0.00641EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.3 views

WordPress plugin Geo Controller 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00135EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.4 views

mall 代码问题漏洞

mall is a macro individual developer of a set of e-commerce system, including the front mall system and backend management system. A code issue vulnerability exists in mall 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0 and prior versions, which stems from an incorrect operation of the function in the...

9.8CVSS6.5AI score0.00324EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.5 views

PT-2026-1300

Name of the Vulnerable Software and Affected Versions Silicon Labs Z-Wave Protocol Controller affected versions not specified Description An integer underflow condition exists in the Silicon Labs Z-Wave Protocol Controller, potentially leading to out-of-bounds memory reads. This occurs due to an...

5.3CVSS6.5AI score0.00226EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.3 views

Silicon Labs Z-Wave Protocol Controller 安全漏洞

Silicon Labs Z-Wave Protocol Controller is an IoT gateway middleware from Silicon Labs, USA. A security vulnerability exists in Silicon Labs Z-Wave Protocol Controller that originates from an integer underflow that could result in an out-of-bounds memory read...

5.3CVSS6.8AI score0.00226EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.6 views

PT-2026-1281

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS6.4AI score0.00135EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.2 views

PT-2026-1200

Name of the Vulnerable Software and Affected Versions JavaMall versions prior to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0 Description A flaw exists in JavaMall that allows for unrestricted file uploads. This issue impacts the Upload function within the file...

9.8CVSS6.2AI score0.00324EPSS
Exploits1References9
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an unset error code in the mchpeicdomainalloc function in the mchp-eic interrupt controller driver, whi...

6.3AI score0.00161EPSS
Exploits0References6
OSV
OSV
added 2026/01/04 2:15 a.m.3 views

CVE-2026-0574

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

8.8CVSS5.4AI score0.00299EPSS
Exploits1References5
Rows per page
Query Builder