Lucene search
+L

2856 matches found

Cvelist
Cvelist
•added 2025/04/17 3:47 p.m.•31 views

CVE-2025-32652 WordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra solace-extra allows Using Malicious Files.This issue affects Solace Extra: from n/a through = 1.3.1...

9.9CVSS0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:47 p.m.•8 views

CVE-2025-32652 WordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra allows Using Malicious Files. This issue affects Solace Extra: from n/a through 1.3.1...

9.9CVSS6.9AI score0.00435EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:47 p.m.•66 views

CVE-2025-32652

CVE-2025-32652 concerns Solace Extra for WordPress, affected up to version 1.3.1, with an authenticated Arbitrary File Upload (Unrestricted Upload of File with Dangerous Type) vulnerability. CVSS v3.1 base score 9.9 (CRITICAL) via NETWORK access and requires LOW privileges with NO user interactio...

9.9CVSS7.2AI score0.00435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•15 views

PT-2025-17158 · Unknown · Solace Extra

Name of the Vulnerable Software and Affected Versions: Solace Extra versions 1.3.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions 1.3.1 and earlier, consider restricting file...

9.9CVSS9.4AI score0.00435EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•3 views

CVE-2025-32652: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra solace-extra allows Using Malicious Files.This issue affects Solace Extra: from n/a through = 1.3.1...

9.9CVSS5.7AI score0.00435EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•17 views

WordPress plugin Solace Extra 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.9CVSS8.6AI score0.00435EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/10 2:01 p.m.•18 views

WordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by theviper17 in WordPress Plugin Solace Extra versions = 1.3.1...

9.9CVSS8.4AI score0.00435EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•16 views

PT-2025-17289 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.0 through 15.03.05.19 Description: A critical issue affects the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument mac leads to buffer overflow. The attack may be...

9CVSS9.1AI score0.01114EPSS
SaveExploits1References13
OSV
OSV
•added 2025/03/31 11:15 p.m.•9 views

CVE-2025-24240

A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data...

4.7CVSS5.7AI score0.00196EPSS
SaveExploits0References6
OSV
OSV
•added 2025/03/27 5:15 p.m.•7 views

DEBIAN-CVE-2023-52931

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding the vm to the vmxa table makes it visible to userspace, which could try to race with us to close the vm. So we need to take our extra reference before putting it in the table...

7.8CVSS5.6AI score0.00237EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/27 5:15 p.m.•14 views

DEBIAN-CVE-2022-49761

In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...

7.8CVSS5.3AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/27 5:15 p.m.•22 views

UBUNTU-CVE-2023-52931

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding the vm to the vmxa table makes it visible to userspace, which could try to race with us to close the vm. So we need to take our extra reference before putting it in the table...

7.8CVSS6.3AI score0.00237EPSS
SaveExploits0References5
OSV
OSV
•added 2025/03/27 5:15 p.m.•24 views

UBUNTU-CVE-2022-49738

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on iextraisize in isalive syzbot found a f2fs bug: BUG: KASAN: slab-out-of-bounds in datablkaddr fs/f2fs/f2fs.h:2891 inline BUG: KASAN: slab-out-of-bounds in isalive fs/f2fs/gc.c:1117 inline BUG: KASA...

7.1CVSS6.4AI score0.00195EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/03/27 4:42 p.m.•3 views

CVE-2022-49738 f2fs: fix to do sanity check on i_extra_isize in is_alive()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on iextraisize in isalive syzbot found a f2fs bug: BUG: KASAN: slab-out-of-bounds in datablkaddr fs/f2fs/f2fs.h:2891 inline BUG: KASAN: slab-out-of-bounds in isalive fs/f2fs/gc.c:1117 inline BUG: KASA...

7.1CVSS6.1AI score0.00195EPSS
SaveExploits0References5
CVE
CVE
•added 2025/03/27 4:37 p.m.•172 views

CVE-2023-52931

CVE-2023-52931 : In the Linux kernel, a vulnerability in the DRM/i915 stack (vm use-after-free) was resolved. The root cause was that adding the vm to the vm_xa table made it visible to userspace, creating a race with the kernel when closing the vm. The remediation is to take an extra reference b...

7.8CVSS6.1AI score0.00237EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•15 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from f2fs not performing integrity checks on iextraisize...

7.1CVSS6.4AI score0.00195EPSS
SaveExploits0References7
OSV
OSV
•added 2025/03/20 10:15 a.m.•15 views

CVE-2024-10907

In lm-sys/fastchat Release v0.2.36, the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary. Each extra character is processed in an infinit...

7.5CVSS5.8AI score0.00687EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/17 10:30 p.m.•17 views

CVE-2025-26924

Improper Control of Generation of Code 'Code Injection' vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through = 3.4.7...

6.5CVSS5.9AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/15 10:15 p.m.•18 views

CVE-2025-26924

Improper Control of Generation of Code 'Code Injection' vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through = 3.4.7...

6.5CVSS0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/15 9:57 p.m.•25 views

CVE-2025-26924 WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through = 3.4.7...

6.5CVSS0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder