Lucene search
+L

7531 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2023-3011

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.01111EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-49402

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00441EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-48316

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00328EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-2168

Malicious code in bioql PyPI...

6.1CVSS7AI score0.00986EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•8 views

EUVD-2022-53142

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00596EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-30596

Malicious code in bioql PyPI...

7.6CVSS6.4AI score0.00431EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/03 11:17 a.m.•31 views

CVE-2025-9945 Optimize More! – CSS <= 1.0.3 - Cross-Site Request Forgery to Plugin Settings Reset

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the resetplugin function. This makes it possible for unauthenticated attackers to reset the plugin's...

4.3CVSS0.00142EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/03 12:00 a.m.•2 views

CVE-2025-9945: Cross-Site Request Forgery (CSRF)

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the resetplugin function. This makes it possible for unauthenticated attackers to reset the plugin's...

4.3CVSS5.6AI score0.00142EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•24 views

WordPress plugin Optimize More! – CSS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Optimize...

4.3CVSS6.5AI score0.00142EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/30 10:46 p.m.•35 views

CVE-2025-43813

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...

6.9CVSS6AI score0.00498EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/30 12:30 a.m.•20 views

GHSA-2HM7-R8F3-423H Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...

6.9CVSS6.1AI score0.00498EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2025/09/30 12:30 a.m.•42 views

Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...

8.2CVSS6AI score0.00498EPSS
SaveExploits0References7Affected Software2
Positive Technologies
Positive Technologies
•added 2025/09/30 12:00 a.m.•22 views

PT-2025-40037

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...

6.9CVSS6AI score0.00498EPSS
SaveExploits0References8
NVD
NVD
•added 2025/09/29 11:15 p.m.•39 views

CVE-2025-43813

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...

8.2CVSS0.00498EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/29 11:15 p.m.•23 views

CVE-2025-43813

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...

8.2CVSS7.1AI score0.00498EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/29 10:19 p.m.•42 views

CVE-2025-43813

Summary (CVE-2025-43813) : Liferay Portal (ComboServlet) is vulnerable to path traversal in affected versions (Portal 7.4.0–7.4.3.107, older unsupported; Liferay DXP 2023.Q3/Q4 series; related 7.4/7.3 GA updates). The flaw allows remote attackers to access arbitrary CSS/JS files and load them rep...

8.2CVSS6.1AI score0.00498EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/29 12:00 a.m.•4 views

CVE-2025-43813: Improper Limitation of a Pathname to a Restricted Directory

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...

8.2CVSS6AI score0.00498EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/29 12:00 a.m.•18 views

Liferay Portal和Liferay DXP 路径遍历漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

8.2CVSS6.1AI score0.00498EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/11 5:29 p.m.•17 views

CVE-2025-58980

Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export WP Page to Static HTML/CSS: from n/a through = 4.1.0...

5.3CVSS5.9AI score0.00231EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2011-3443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service hea...

7.5CVSS8.4AI score0.02004EPSS
SaveExploits0References2
Rows per page
Query Builder