Lucene search
+L

110 matches found

CVE
CVE
added 2 hours ago5 views

CVE-2026-16069

CVE-2026-16069 affects the Brizy WordPress plugin (pre-2.8.19). The vulnerability stems from unsanitized/uncached featured-image focal-point coordinates submitted via an AJAX action, which are stored and later echoed into HTML attributes in the post editor’s Featured Image meta box. This enables ...

5.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.12 views

CVE-2026-33161

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, a low-privileged authenticated user can call assets/image-editor with the ID of a private asset they cannot view and still receive editor response dat...

5.3CVSS5.7AI score0.00215EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/24 5:31 p.m.4 views

CVE-2026-33161

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, a low-privileged authenticated user can call assets/image-editor with the ID of a private asset they cannot view and still receive editor response dat...

5.3CVSS5.7AI score0.00215EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/03/24 5:31 p.m.7 views

CVE-2026-33161 Craft CMS: Anonymous "assets/image-editor" calls returns private asset editor metadata to unauthorized users

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, a low-privileged authenticated user can call assets/image-editor with the ID of a private asset they cannot view and still receive editor response dat...

5.3CVSS5.8AI score0.00215EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/03/24 5:27 p.m.16 views

Craft CMS' anonymous "assets/image-editor" calls return private asset editor metadata to unauthorized users

Summary A low-privileged authenticated user can call assets/image-editor with the ID of a private asset they cannot view and still receive editor response data, including focalPoint. The endpoint returns private editing metadata without per-asset authorization validation. Root-cause analysis: 1...

5.3CVSS5.8AI score0.00215EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/03/24 5:27 p.m.6 views

GHSA-VGJG-248P-RFM2 Craft CMS' anonymous "assets/image-editor" calls return private asset editor metadata to unauthorized users

Summary A low-privileged authenticated user can call assets/image-editor with the ID of a private asset they cannot view and still receive editor response data, including focalPoint. The endpoint returns private editing metadata without per-asset authorization validation. Root-cause analysis: 1...

5.3CVSS5.8AI score0.00215EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2014-0870

Malware in sbrugna...

3.5CVSS6.4AI score0.01088EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2013-5238

Malware in sbrugna...

3.3CVSS6.1AI score0.0059EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2014-0873

Malware in sbrugna...

3.5CVSS6.4AI score0.01088EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2014-0872

Malware in sbrugna...

5CVSS6.4AI score0.01173EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-0869

Malware in sbrugna...

4CVSS6.4AI score0.00842EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2013-5237

Malware in sbrugna...

3.3CVSS6.1AI score0.0059EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2014-0871

Malware in sbrugna...

5.3CVSS5.5AI score0.00229EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2014-0883

Malware in sbrugna...

3.5CVSS6.4AI score0.00936EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-8188

Malware in sbrugna...

8.8CVSS8.6AI score0.00549EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2013-2964

Malware in sbrugna...

4.3CVSS6.4AI score0.00931EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-16748

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00202EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-16747

Malicious code in bioql PyPI...

4.6CVSS6.6AI score0.0012EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-16749

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00219EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/06/05 12:3 a.m.17 views

CVE-2025-43925

An issue was discovered in Unicom Focal Point 7.6.1. The database is encrypted with a hardcoded key, making it easier to recover the cleartext data...

4.6CVSS6.8AI score0.0012EPSS
SaveExploits0References1
Rows per page
Query Builder