Lucene search
K

7 matches found

CVE
CVE
added 2025/11/27 12:31 p.m.8 views

CVE-2025-12971

CVE-2025-12971 – The WordPress plugin Folders – Unlimited Folders to Organize Media Library (and related variants) is vulnerable to unauthorized data modification due to a misconfigured capability check in the function wcp_change_post_folder . This affects all versions up to and including 3.1.5 ....

4.3CVSS5.2AI score0.00039EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/11/27 9:45 a.m.3 views

WordPress Folders plugin <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation vulnerability

Incorrect Authorization to Authenticated Contributor+ Folder Content Manipulation vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Folders versions = 3.1.5...

4.3CVSS7AI score0.00039EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-0063

Malware in sbrugna...

5CVSS6.3AI score0.00319EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/12/22 12:0 a.m.4 views

PT-2022-27785 · Tauri · Tauri

Name of the Vulnerable Software and Affected Versions: Tauri versions prior to the latest release Tauri versions 1.x prior to the backported patch Description: The filesystem glob pattern wildcards , ?, and ... match file path literals and leading dots by default, which unintentionally exposes su...

7.7CVSS7.3AI score0.00509EPSS
Exploits1References11
OSV
OSV
added 2021/01/15 7:15 a.m.1 views

CVE-2021-23837

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selectedfolder HTTP request body parameter for the acp interface. The affected parameter which retrieves the file contents of the specified folder was found to be accepting malicious...

6.5CVSS6.6AI score
Exploits0References3
Prion
Prion
added 2020/03/27 7:15 p.m.23 views

Design/Logic Flaw

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders...

4CVSS6.3AI score0.00179EPSS
Exploits0References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2006/12/04 11:28 a.m.2 views

CVE-2006-6246

Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to 1 camera del, 2 camera edit, 3 folder/album deletion, 4 photo.move, 5 content.indexer, 6 folder.content, and possibly other...

7.5CVSS5.7AI score0.012EPSS
Exploits0References7
Rows per page
Query Builder