CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

Tenable Nessus•added 2019/05/30 12:0 a.m.•93 views

WordPress < 4.9.9 Remote Code Execution Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.9.9. It is, therefore, affected by remote command execution vulnerabilities in its thumbnail processing component due to insufficient validation of user input. An authenticated,...

8.8CVSS8.4AI score0.07264EPSS

Exploits0References3

Circl•added 2018/09/06 4:33 p.m.•9 views

CVE-2017-1000600

creationtimestamp| type| source ---|---|--- 2018-09-06 16:33:37+00:00| seen| https://t.me/cibsecurity/37...

8.8CVSS8AI score0.03798EPSS

Exploits0References1

Prion•added 2018/09/06 4:29 p.m.•25 views

Input validation

WordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code execution due to an incomplete fix for CVE-2017-1000600. This attack appears to be exploitable via thumbnail upload by an authenticated user and may require...

6.5CVSS9AI score0.07264EPSS

Exploits0References3Affected Software1

UbuntuCve•added 2018/09/06 12:29 p.m.•19 views

CVE-2017-1000600

WordPress version 4.9 contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code execution. This attack appears to be exploitable via thumbnail upload by an authenticated user and may require additional plugins in order to be exploited however this has...

8.8CVSS7.3AI score0.03798EPSS

Exploits0References3