Lucene search
+L

372 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 8:35 p.m.11 views

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet...

5CVSS6.7AI score0.01104EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/14 9:16 p.m.17 views

CVE-2025-3659

Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...

9.4CVSS7.2AI score0.00307EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/12 9:15 p.m.36 views

CVE-2025-3659

Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...

9.4CVSS0.00307EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/05/12 8:40 p.m.9 views

CVE-2025-3659 Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP

Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...

9.4CVSS7.2AI score0.00307EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/05/12 8:40 p.m.47 views

CVE-2025-3659 Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP

Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...

9.4CVSS0.00307EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/05/12 12:00 a.m.25 views

PT-2025-20739

Name of the Vulnerable Software and Affected Versions Digi PortServer TS versions prior to and including 82000747 AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA versions prior to and including 82000774 Z, build date 10/19/2020 Digi One IAP versions prior to and including 8200077...

9.4CVSS6AI score0.00307EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/05/12 12:00 a.m.14 views

Digi多款产品 安全漏洞

Digi PortServer TS and others are products of Digi Corporation.Digi PortServer TS is Digi One SP is an industrial-grade serial device server.Digi One IAP is an industrial automation protocol converter and intelligent serial server designed for PLC and SCADA systems. A security vulnerability exist...

9.4CVSS6.9AI score0.00307EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/02/03 12:00 a.m.9 views

PT-2025-4626 · Unknown · Digitimber Cpanel Integration

Name of the Vulnerable Software and Affected Versions: DigiTimber cPanel Integration versions 1.4.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

7.1CVSS9.1AI score0.00174EPSS
SaveExploits0References5
NVD
NVD
added 2025/01/07 5:15 p.m.37 views

CVE-2025-22354

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Themes Digi Store allows DOM-Based XSS.This issue affects Digi Store: from n/a through 1.1.4...

6.5CVSS0.00227EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 4:52 p.m.67 views

CVE-2025-22354

CVE-2025-22354 : Digest Digi Store WordPress theme vulnerability – stored Cross-Site Scripting in Digi Store up to version 1.1.4. The Red Hat entry lists Digi Store

6.5CVSS8.6AI score0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 4:52 p.m.10 views

CVE-2025-22354 WordPress Digi Store theme <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Themes Digi Store digi-store allows DOM-Based XSS.This issue affects Digi Store: from n/a through = 1.1.4...

6.5CVSS8.6AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/07 4:52 p.m.41 views

CVE-2025-22354 WordPress Digi Store theme <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Themes Digi Store allows DOM-Based XSS.This issue affects Digi Store: from n/a through 1.1.4...

6.5CVSS0.00227EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.10 views

WordPress plugin Digi Store 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.8AI score0.00227EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/03 2:26 p.m.11 views

WordPress Digi Store theme <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Digi Store versions = 1.1.4...

6.5CVSS6.1AI score0.00227EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/12/09 10:15 p.m.22 views

CVE-2024-50628

An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues...

8.8CVSS6.3AI score0.00464EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/09 10:15 p.m.17 views

CVE-2024-50625

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when...

8CVSS0.00313EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/09 10:15 p.m.19 views

CVE-2024-50626

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data...

8.8CVSS0.00523EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/09 10:15 p.m.21 views

CVE-2024-50626

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data...

8.8CVSS5.8AI score0.00523EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/09 10:15 p.m.21 views

CVE-2024-50627

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network with specific permissions to upload and execute malicious files, potentially leading to unauthorized system access...

8.8CVSS5.9AI score0.00322EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/09 10:15 p.m.26 views

CVE-2024-50627

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network with specific permissions to upload and execute malicious files, potentially leading to unauthorized system access...

8.8CVSS0.00322EPSS
SaveExploits0References3
Rows per page
Query Builder