Lucene search
+L

9372 matches found

Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.8 views

PT-2025-39593

Name of the Vulnerable Software and Affected Versions wpshuffle Subscribe to Download versions through 2.0.9 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion...

7.5CVSS6.7AI score0.00477EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.6 views

WordPress plugin Testimonial Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.8CVSS6.5AI score0.00478EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.7 views

WSO2 Enterprise Integrator 安全漏洞

WSO2 Enterprise Integrator is an open source hybrid integration platform from WSO2, Inc. in the United States. The platform supports communication between multiple applications. A security vulnerability exists in WSO2 Enterprise Integrator that stems from the BPEL uploader SOAP service endpoint n...

7.2CVSS6.8AI score0.00539EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.9 views

Four-Faith Water Conservancy Informatization Platform 路径遍历漏洞

Four-Faith Water Conservancy Informatization Platform is a water conservancy informatization system from Four-Faith. A path traversal vulnerability exists in Four-Faith Water Conservancy Informatization Platform version 1.0, which originates from an attack on the file /sysRole/index.do/... /...

7.5CVSS5.4AI score0.00971EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.10 views

PT-2025-39642

Name of the Vulnerable Software and Affected Versions Four-Faith Water Conservancy Informatization Platform version 1.0 Description A path traversal flaw exists in Four-Faith Water Conservancy Informatization Platform version 1.0. The issue affects an unknown function within the file...

6.9CVSS5.2AI score0.00971EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2025/09/25 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2023-53396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in dorename If renaming a file in an encrypted directory, function...

5.5CVSS5.2AI score0.00148EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.11 views

CVE-2025-58973

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows PHP Local File Inclusion.This issue affects Easy Elementor Addons: from n/a through = 2.2.8...

7.5CVSS5.9AI score0.00511EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.7 views

CVE-2025-53450

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Pluginwale Easy Pricing Table WP easy-pricing-table-wp allows PHP Local File Inclusion.This issue affects Easy Pricing Table WP: from n/a through = 1.1.3...

7.5CVSS5.9AI score0.00666EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/24 5:15 p.m.12 views

CVE-2025-56815

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name...

7.1CVSS5.8AI score0.00624EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2025/09/24 12:00 a.m.37 views

CVE-2025-56815

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name...

0.00624EPSS
SaveExploits2References2
NVD
NVD
added 2025/09/22 7:16 p.m.34 views

CVE-2025-59588

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PenciDesign Soledad soledad allows PHP Local File Inclusion.This issue affects Soledad: from n/a through = 8.6.8...

7.5CVSS0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:26 p.m.31 views

CVE-2025-58973 WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows PHP Local File Inclusion.This issue affects Easy Elementor Addons: from n/a through = 2.2.8...

7.5CVSS0.00511EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.34 views

CVE-2025-59588 WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PenciDesign Soledad soledad allows PHP Local File Inclusion.This issue affects Soledad: from n/a through = 8.6.8...

7.5CVSS0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.4 views

CVE-2025-59588 WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PenciDesign Soledad allows PHP Local File Inclusion. This issue affects Soledad: from n/a through 8.6.8...

7.5CVSS6.7AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.38 views

CVE-2025-59588

CVE-2025-59588 describes an authenticated Local File Inclusion in the Soledad WordPress theme (Soledad

7.5CVSS5.9AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.22 views

CVE-2025-53450

CVE-2025-53450 is an active vulnerability affecting Easy Pricing Table WP (

7.5CVSS5.9AI score0.00666EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.19 views

CVE-2025-57925

CVE-2025-57925 affects immonex Kickstart Team (WordPress plugin)

7.5CVSS5.9AI score0.0054EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.16 views

CVE-2025-57925 WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart Team immonex-kickstart-team allows PHP Local File Inclusion.This issue affects immonex Kickstart Team: from n/a through = 1.6.9...

7.5CVSS0.0054EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.4 views

CVE-2025-57925 WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart Team immonex-kickstart-team allows PHP Local File Inclusion.This issue affects immonex Kickstart Team: from n/a through = 1.6.9...

7.5CVSS5.3AI score0.0054EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.12 views

WordPress plugin Easy Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

7.5CVSS6.5AI score0.00511EPSS
SaveExploits0References1
Rows per page
Query Builder