Lucene search
+L

1518 matches found

CNNVD
CNNVD
added 2025/11/10 12:00 a.m.9 views

Employee Records System 安全漏洞

Employee Records System is a small business employee record keeping system. A security vulnerability exists in Employee Records System version 1.0, which stems from a failure to perform server-side validation on the uploadID.php endpoint, which could allow a remote, unauthenticated attacker to...

9.8CVSS7.4AI score0.0319EPSS
SaveExploits2References4
CNVD
CNVD
added 2025/11/10 12:00 a.m.6 views

Cisco Unified Contact Center Express Code Issue Vulnerability

Cisco Unified Contact Center Express Unified CCX is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. A security vulnerability exists in Cisco...

7.2CVSS5.9AI score0.00367EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/06 4:41 p.m.12 views

CVE-2025-20375

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to specific UI features. An attacker could exploit this vulnerability by uploading a...

7.2CVSS7.3AI score0.00367EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/11/05 5:15 p.m.4 views

CVE-2025-20375

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to specific UI features. An attacker could exploit this vulnerability by uploading a...

7.2CVSS5.9AI score0.00367EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/11/05 5:15 p.m.10 views

CVE-2025-20376

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to file upload mechanisms. An attacker could exploit this vulnerability by uploading a...

7.2CVSS0.00446EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/05 4:31 p.m.18 views

CVE-2025-20376 Cisco Unified Contact Center Express Remote Code Execution Vulnerability

A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files. This vulnerability is due to an insufficient input validation associated to file upload mechanisms. An attacker could exploit this vulnerability by uploading a...

6.5CVSS0.00446EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/11/01 6:38 a.m.4 views

Directory Traversal

Overview mci-py is a Python adapter for MCI Affected versions of this package are vulnerable to Directory Traversal via the FileExecutor.execute and CLIExecutor.execute functions. An attacker can read, write, or execute files outside of the intended directory Details A Directory Traversal attack...

8.7CVSS7.8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/15 2:26 a.m.8 views

CVE-2025-11746 XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion

The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theetajaxrequiredpluginspopup function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on t...

8.8CVSS6.8AI score0.00673EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/09 1:13 a.m.8 views

CVE-2025-61787

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions prior to 2.5.3 and 2.2.15 are vulnerable to Command Line Injection attacks on Windows when batch files are executed. In Windows, CreateProcess always implicitly spawns cmd.exe if a batch file .bat, .cmd, etc. is being executed ev...

8.1CVSS7.8AI score0.02084EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/08 12:59 a.m.1 views

CVE-2025-61787 Deno is Vulnerable to Command Injection on Windows During Batch File Execution

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions prior to 2.5.3 and 2.2.15 are vulnerable to Command Line Injection attacks on Windows when batch files are executed. In Windows, CreateProcess always implicitly spawns cmd.exe if a batch file .bat, .cmd, etc. is being executed ev...

8.1CVSS7.3AI score0.02084EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2013-5374

Malware in sbrugna...

4CVSS6.4AI score0.01466EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2012-1933

Malware in sbrugna...

6.8CVSS6.1AI score0.02299EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2008-4480

Malware in sbrugna...

9.3CVSS6.4AI score0.02858EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-3762

Malware in sbrugna...

5CVSS6.4AI score0.01351EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-1513

Malware in sbrugna...

7.5CVSS6.4AI score0.02299EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-23932

Malware in sbrugna...

9.3CVSS8.1AI score0.01618EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2007-4567

Malware in sbrugna...

7.5CVSS6.3AI score0.02903EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2006-6375

Malware in sbrugna...

7.5CVSS6.4AI score0.01688EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2008-4327

Malware in sbrugna...

7.5CVSS6.4AI score0.02843EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.36 views

EUVD-2020-4557

Malware in sbrugna...

7.8CVSS7.5AI score0.01088EPSS
SaveExploits4References2
Rows per page
Query Builder