Lucene search
+L

925 matches found

NVD
NVD
added 2025/10/31 8:15 a.m.12 views

CVE-2025-10897

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

8.6CVSS0.01817EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/10/31 12:0 a.m.11 views

WordPress plugin WooCommerce Designer Pro 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path...

8.6CVSS6.5AI score0.01817EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/10/22 7:13 a.m.16 views

CVE-2025-11949

EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to obtain database administrator credentials via a specific functionality...

8.7CVSS7.1AI score0.00423EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/21 7:15 a.m.9 views

CVE-2025-11949

EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to obtain database administrator credentials via a specific functionality...

8.7CVSS0.00423EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/21 6:49 a.m.9 views

EUVD-2025-35153

EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to obtain database administrator credentials via a specific functionality...

8.7CVSS6.6AI score0.00423EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/21 6:49 a.m.14 views

CVE-2025-11949 Digiwin|EasyFlow .NET and EasyFlow AiNet - Missing Authentication

EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to obtain database administrator credentials via a specific functionality...

8.7CVSS0.00423EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/21 6:31 a.m.10 views

CVE-2025-62577

ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges...

8.8CVSS7.2AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/20 6:15 a.m.8 views

CVE-2025-62577

ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges...

8.8CVSS0.00174EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/20 5:32 a.m.3 views

CVE-2025-62577

ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges...

8.8CVSS6.9AI score0.00174EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/20 5:32 a.m.22 views

CVE-2025-62577

ETERNUS SF by Fsas Technologies Inc. is affected by an incorrect default permissions (CWE-276) vulnerability. A low-privileged user with access to the management server may obtain database credentials and could potentially execute OS commands with administrator privileges . The issue is associate...

8.8CVSS6.9AI score0.00174EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/20 5:32 a.m.18 views

CVE-2025-62577

ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges...

8.8CVSS0.00174EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/10/20 5:20 a.m.6 views

ETERNUS SF vulnerable to incorrect default permissions

Overview ETERNUS SF provided by Fsas Technologies Inc. contains the following vulnerability. Incorrect default permissions CWE-276 - CVE-2025-62577 Fsas Technologies Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Fsas Technologies Inc...

8.8CVSS6.9AI score0.00174EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2007-6235

Malware in sbrugna...

2.1CVSS6.4AI score0.00444EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-0756

Malware in sbrugna...

5.8CVSS5.1AI score0.00345EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-18945

Malware in sbrugna...

7.5CVSS7.6AI score0.02827EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2007-6153

Malware in sbrugna...

7.5CVSS6.4AI score0.07389EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-2572

Malware in sbrugna...

6.4CVSS6.4AI score0.01156EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-3963

Malware in sbrugna...

4CVSS6.4AI score0.00937EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2008-7028

Malware in sbrugna...

7.5CVSS6.4AI score0.0253EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-2518

Malware in sbrugna...

5.5CVSS5.5AI score0.0015EPSS
SaveExploits0References2
Rows per page
Query Builder