CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

CISA KEV Catalog•added 2021/11/03 12:0 a.m.•44 views

vBulletin PHP Module Remote Code Execution Vulnerability

The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. This CVE ID resolves an incomplete patch for CVE-2019-16759...

9.8CVSS9.5AI score0.9443EPSS

In wildExploits28

VulnCheck KEV•added 2020/12/14 12:0 a.m.•1 views

VulnCheck KEV: CVE-2020-17496

9.8CVSS8AI score0.9443EPSS

Exploits28References1

OSV•added 2020/08/12 2:15 p.m.•3 views

CVE-2020-17496

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759...

9.8CVSS5.9AI score0.94182EPSS

Exploits2References5