Lucene search
+L

8 matches found

CVE
CVE
•added 2025/11/27 12:31 p.m.•28 views

CVE-2025-12971

CVE-2025-12971 – The WordPress plugin Folders – Unlimited Folders to Organize Media Library (and related variants) is vulnerable to unauthorized data modification due to a misconfigured capability check in the function wcp_change_post_folder . This affects all versions up to and including 3.1.5 ....

4.3CVSS5.9AI score0.00226EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/11/27 9:45 a.m.•17 views

WordPress Folders plugin <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation vulnerability

Incorrect Authorization to Authenticated Contributor+ Folder Content Manipulation vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Folders versions = 3.1.5...

4.3CVSS7AI score0.00226EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2014-0063

Malware in sbrugna...

5CVSS5.8AI score0.02138EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/27 12:00 a.m.•2 views

CVE-2025-46415: Time-of-check Time-of-use (TOCTOU) Race Condition

A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b...

3.2CVSS5.8AI score0.00139EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/22 12:00 a.m.•32 views

PT-2022-27785 · Tauri · Tauri

Name of the Vulnerable Software and Affected Versions: Tauri versions prior to the latest release Tauri versions 1.x prior to the backported patch Description: The filesystem glob pattern wildcards , ?, and ... match file path literals and leading dots by default, which unintentionally exposes su...

7.7CVSS7.3AI score0.01035EPSS
SaveExploits1References11
OSV
OSV
•added 2021/01/15 7:15 a.m.•24 views

CVE-2021-23837

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...

6.5CVSS6.6AI score0.01481EPSS
SaveExploits2References3
Prion
Prion
•added 2020/03/27 7:15 p.m.•30 views

Design/Logic Flaw

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders...

4CVSS6.3AI score0.01032EPSS
SaveExploits0References3Affected Software2
attackerkb
attackerkb
•added 2006/12/04 11:28 a.m.•7 views

CVE-2006-6246

Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to 1 camera del, 2 camera edit, 3 folder/album deletion, 4 photo.move, 5 content.indexer, 6 folder.content, and possibly other...

7.5CVSS5.7AI score0.01673EPSS
SaveExploits0References7
Rows per page
Query Builder