Lucene search
K

16 matches found

CNVD
CNVD
added 2026/03/19 12:0 a.m.1 views

WordPress Plugin wpDiscuz Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin wpDiscuz, which stems fr...

6.9CVSS5.8AI score0.00051EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.2 views

WordPress plugin wpDiscuz 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin wpDiscuz, which stems fr...

6.9CVSS5.7AI score0.00051EPSS
Exploits0References3
CVE
CVE
added 2026/02/18 12:28 p.m.8 views

CVE-2026-1317

The WP Import – Ultimate CSV XML Importer for WordPress plugin is affected by a SQL Injection in all versions up to 7.37 due to insufficient escaping of the file_name parameter, which is stored in the database during file upload and later used in raw SQL queries. This requires an authenticated us...

6.5CVSS6AI score0.00038EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/03 5:19 a.m.1 views

CVE-2025-9711

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands...

8.5CVSS5.3AI score0.00007EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/03 5:19 a.m.21 views

CVE-2025-9711 Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands...

8.5CVSS0.00007EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/03 5:19 a.m.1 views

EUVD-2025-206741

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands...

8.5CVSS5.3AI score0.00007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/03 5:19 a.m.1 views

CVE-2025-9711 Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands...

8.5CVSS5.3AI score0.00007EPSS
Exploits0References1
CVE
CVE
added 2026/02/03 5:19 a.m.8 views

CVE-2025-9711

CVE-2025-9711 is a local privilege escalation flaw in Brocade Fabric OS prior to 9.2.1c3, enabling a local authenticated user to elevate privileges to root via the export option of the seccertmgmt and seccryptocfg commands. Connected sources confirm affected software versions and the root-cause i...

8.5CVSS5.3AI score0.00007EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.2 views

PT-2026-5774

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.2.1c3 Brocade Fabric OS versions 9.2.2 through 9.2.2b Description A flaw exists in Brocade Fabric OS that could allow a locally authenticated user to gain root privileges. This is achieved by utilizing the...

8.5CVSS5.5AI score0.00007EPSS
Exploits0References5
Broadcom
Broadcom
added 2026/01/27 12:0 a.m.15 views

Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b (CVE-2025-9711)

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands...

8.5CVSS5.9AI score0.00007EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-46697

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.01217EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-52825

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.08622EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/12 7:4 a.m.14 views

CVE-2024-5487 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...

8.3CVSS7.9AI score0.01217EPSS
Exploits0References1
CVE
CVE
added 2024/08/12 7:4 a.m.42 views

CVE-2024-5487

CVE-2024-5487 affects Zohocorp ManageEngine ADAudit Plus versions below 8110. It is an authenticated SQL Injection vulnerability in the attack surface analyzer’s export option, with CVSS: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD) and base score 8.8 HIGH. Red Hat and other feeds corroborate the is...

8.8CVSS8.6AI score0.01217EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.1 views

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, prove compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus version 8110 and prior versions, which stems from a vulnerability to authenticated SQL injection attacks in the...

8.8CVSS7.6AI score0.01217EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/06/14 12:0 a.m.1 views

PT-2024-8781 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8110 Description: The issue is related to a lack of protection in the SQL query structure, which can be exploited to execute custom queries and gain access to database table records. This is a...

8.8CVSS8.3AI score0.01217EPSS
Exploits0References11
Rows per page
Query Builder