Lucene search
+L

2658 matches found

CNNVD
CNNVD
added 2025/04/11 12:00 a.m.9 views

WordPress plugin Neon Product Designer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS9.1AI score0.00527EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/04/11 12:00 a.m.15 views

PT-2025-16096 · Unknown · John Weissberg Print Science Designer

Name of the Vulnerable Software and Affected Versions: John Weissberg Print Science Designer versions 1.3.155 and earlier Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows for Path Traversal, which can...

7.5CVSS7.8AI score0.00734EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/04/11 12:00 a.m.7 views

WordPress plugin Print Science Designer 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

7.5CVSS7.8AI score0.00734EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/09 5:15 p.m.33 views

CVE-2025-32677

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in solwininfotech WP Social Stream Designer social-stream-design allows Blind SQL Injection.This issue affects WP Social Stream Designer: from n/a through = 1.3...

7.6CVSS0.00504EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/09 4:09 p.m.71 views

CVE-2025-32677

CVE-2025-32677 refers to an SQL Injection vulnerability in the WordPress plugin WP Social Stream Designer. The issue arises from improper neutralization of input in an SQL command, enabling a Blind SQL Injection. Affected are WP Social Stream Designer versions at or below 1.3 (per initial record ...

7.6CVSS7.3AI score0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/09 4:09 p.m.26 views

CVE-2025-32677 WordPress WP Social Stream Designer plugin <= 1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in solwininfotech WP Social Stream Designer social-stream-design allows Blind SQL Injection.This issue affects WP Social Stream Designer: from n/a through = 1.3...

7.6CVSS0.00504EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:00 a.m.13 views

PT-2025-15821 · WordPress · Wp Social Stream Designer

Name of the Vulnerable Software and Affected Versions: WP Social Stream Designer versions 1.3 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection,...

7.6CVSS8.2AI score0.00504EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/09 12:00 a.m.11 views

WordPress plugin WP Social Stream Designer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

7.6CVSS8.3AI score0.00504EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/07 12:00 a.m.12 views

PT-2025-15304 · Google · Google Web Designer

Name of the Vulnerable Software and Affected Versions: Google Web Designer affected versions not specified Description: The software is susceptible to remote code execution RCE on macOS and Linux systems due to improper symbolic link resolution within the preview feature. This allows for potentia...

7.8CVSS6.9AI score0.00156EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/04/03 9:39 p.m.15 views

CVE-2025-31082

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in InfornWeb News & Blog Designer Pack blog-designer-pack allows PHP Local File Inclusion.This issue affects News & Blog Designer Pack: from n/a through = 4.0...

8.1CVSS7.2AI score0.0083EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/02 1:43 p.m.23 views

CVE-2025-31606

Missing Authorization vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Blog Designer: from n/a through = 1.0.0...

4.8CVSS7.2AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 9:15 p.m.18 views

CVE-2025-31082

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in InfornWeb News & Blog Designer Pack blog-designer-pack allows PHP Local File Inclusion.This issue affects News & Blog Designer Pack: from n/a through = 4.0...

8.1CVSS0.0083EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/04/01 12:00 a.m.6 views

VulnCheck KEV: CVE-2025-31082

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in InfornWeb News & Blog Designer Pack blog-designer-pack allows PHP Local File Inclusion.This issue affects News & Blog Designer Pack: from n/a through = 4.0...

8.1CVSS5.8AI score0.0083EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/31 2:07 p.m.10 views

WordPress SP Blog Designer plugin <= 1.0.0 - Arbitrary Shortcode Execution vulnerability

Arbitrary Shortcode Execution vulnerability discovered by theviper17 in WordPress Plugin SP Blog Designer versions = 1.0.0...

4.8CVSS7.1AI score0.00203EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/31 1:15 p.m.20 views

CVE-2025-31606

Missing Authorization vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Blog Designer: from n/a through = 1.0.0...

4.8CVSS0.00203EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/31 12:55 p.m.72 views

CVE-2025-31606

CVE-2025-31606 affects the WordPress plugin SP Blog Designer. The vulnerability is a Missing Authorization issue allowing unauthenticated users to perform arbitrary shortcode execution, with affected versions from unknown through 1.0.0. CVSSv3.1 base score is 4.8 (LOW–MEDIUM) and the attack is ne...

4.8CVSS7.2AI score0.00203EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/31 12:00 a.m.8 views

WordPress plugin SP Blog Designer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS8.3AI score0.00203EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/19 12:00 a.m.84 views

IBM InfoSphere Information Server and IBM InfoSphere DataStage Flow Designer Unspecified Vulnerability (CNVD-2025-05561)

IBM InfoSphere Information Server and IBM InfoSphere DataStage Flow Designer are both products of International Business Machines IBM.IBM InfoSphere Information Server is a data integration platform. The platform can be used to integrate data information obtained from various sources.IBM InfoSphe...

6.5CVSS6.3AI score0.00336EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/14 12:00 a.m.36 views

Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05208)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00228EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/14 12:00 a.m.33 views

Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05209)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00242EPSS
SaveExploits0References1
Rows per page
Query Builder