Lucene search
K

4170 matches found

CVE
CVE
added 2025/12/24 2:31 p.m.18 views

CVE-2025-2155

CVE-2025-2155 affects Specto CM (Echo Call Center Services Trade and Industry Inc.). The vulnerability is an Unrestricted Upload of File with Dangerous Type, enabling Remote Code Inclusion. Affected versions are before 17032025. Root cause: improper file‑type validation allowing executable conten...

8.8CVSS5.6AI score0.00288EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/24 2:31 p.m.32 views

CVE-2025-2155 Arbitrary File Upload in EchoCCS's Specto CM

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion. This issue affects Specto CM: before 17032025...

8.8CVSS0.00288EPSS
Exploits0References2
CVE
CVE
added 2025/12/24 2:26 p.m.11 views

CVE-2025-2154

CVE-2025-2154 is a Stored XSS vulnerability affecting Specto CM (Echo Specto Call Center Management) prior to version 17032025, caused by improper input neutralization during web page generation. The issue is documented across multiple sources (NVD, Red Hat, CVE listing) as a stored XSS in Specto...

5.4CVSS5.4AI score0.00138EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/24 2:26 p.m.4 views

CVE-2025-2154 Stored XSS in EchoCCS's Specto CM

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Stored XSS. This issue affects Specto CM: before 17032025...

5.4CVSS5.4AI score0.00138EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.3 views

Echo Specto CM 代码问题漏洞

Echo Specto CM is a call center management system from Echo Turkey. A code issue vulnerability exists in versions prior to Echo Specto CM 17032025, which stems from an unrestricted upload of hazardous types of files, which could lead to remote code inclusion...

8.8CVSS7.4AI score0.00288EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.3 views

Echo Specto CM 跨站脚本漏洞

Echo Specto CM is a call center management system from Echo Turkey. A cross-site scripting vulnerability exists in versions prior to Echo Specto CM 17032025, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

5.4CVSS5.9AI score0.00138EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 4:49 p.m.1 views

ECHO-1B48-C45A-2D3D

Bulletin has no description...

6.9AI score0.00156EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 4:49 p.m.1 views

ECHO-8986-DED1-8404

Bulletin has no description...

6.9AI score0.00161EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 12:42 a.m.3 views

ECHO-3E3E-0BD6-28A8

Bulletin has no description...

6.9AI score0.0018EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 12:42 a.m.1 views

ECHO-C672-1B9A-E8EC

Bulletin has no description...

6.9AI score0.00171EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 12:42 a.m.2 views

ECHO-19BA-6BC3-0948

Bulletin has no description...

5.5CVSS6.9AI score0.00092EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 12:42 a.m.1 views

ECHO-20F6-052F-7D3B

Bulletin has no description...

6.9AI score0.0018EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 12:41 a.m.2 views

ECHO-11C6-FB86-E864

Bulletin has no description...

6.9AI score0.00193EPSS
Exploits0References1
Redos
Redos
added 2025/12/23 12:0 a.m.5 views

ROS-20251223-7312

A vulnerability in the ICMP Echo Reply packet of the ping utility is related to integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

6.5CVSS6.8AI score0.01344EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.2 views

CVE-2025-53432

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Echo echo allows PHP Local File Inclusion.This issue affects Echo: from n/a through = 1.15.0...

8.1CVSS7.1AI score0.00445EPSS
Exploits0References1
OSV
OSV
added 2025/12/19 2:3 a.m.2 views

ECHO-8F7A-5BE1-6612

Bulletin has no description...

5.1CVSS6.9AI score0.00178EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2025/12/19 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for iputils (EulerOS-SA-2025-2545)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.01344EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2025/12/19 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for iputils (EulerOS-SA-2025-2580)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.00311EPSS
Exploits0References2
OSV
OSV
added 2025/12/18 9:0 p.m.1 views

ECHO-C08D-757C-2B27

Bulletin has no description...

6.9AI score0.00171EPSS
Exploits0References1
OSV
OSV
added 2025/12/18 9:0 p.m.1 views

ECHO-F92D-F62D-FE64

Bulletin has no description...

6.9AI score0.0018EPSS
Exploits0References1
Rows per page
Query Builder