Lucene search
+L

13111 matches found

NVD
NVD
•added 2025/04/08 5:15 p.m.•47 views

CVE-2025-32279

Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through = 4.8.5...

4.3CVSS0.00258EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/08 4:59 p.m.•36 views

CVE-2025-32279 WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through = 4.8.5...

4.3CVSS0.00258EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/08 4:59 p.m.•15 views

CVE-2025-32279 WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through = 4.8.5...

4.3CVSS8.4AI score0.00258EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 4:59 p.m.•84 views

CVE-2025-32279

Technical details such as affected versions, root cause, impact, and remediation are not provided in the connected documents; only high-level summaries are present. Monitor official advisories for updates.

4.3CVSS8.4AI score0.00258EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2025/04/08 2:51 p.m.•87 views

GHSA-CGFJ-HJ93-RMH2 Shopware allows Denial Of Service via password length

Impact It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. Patches Update to Shopware 6.6.10.3 or 6.5.8.17 Workarounds For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of...

7.5CVSS5.7AI score0.00425EPSS
SaveExploits0References6
Snyk
Snyk
•added 2025/04/08 2:51 p.m.•11 views

Improper Input Validation

Overview shopware/platform is a Shopware e-commerce core. Affected versions of this package are vulnerable to Improper Input Validation via the password length. This is by submitting excessively long passwords through Storefront forms or Store-API. Remediation Upgrade shopware/platform to version...

8.7CVSS5.8AI score0.00425EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/04/08 2:51 p.m.•13 views

Improper Input Validation

Overview shopware/core is a Shopware platform is the core for all Shopware ecommerce products. Affected versions of this package are vulnerable to Improper Input Validation via the password length. This is by submitting excessively long passwords through Storefront forms or Store-API. Remediation...

8.7CVSS5.8AI score0.00425EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/04/08 2:51 p.m.•43 views

Shopware allows Denial Of Service via password length

Impact It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. Patches Update to Shopware 6.6.10.3 or 6.5.8.17 Workarounds For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of...

7.5CVSS5.7AI score0.00425EPSS
SaveExploits0References6Affected Software2
NVD
NVD
•added 2025/04/08 2:15 p.m.•64 views

CVE-2025-30151

Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin...

7.5CVSS0.00425EPSS
SaveExploits0References1
Mend
Mend
•added 2025/04/08 1:46 p.m.•12 views

CVE-2025-30151

Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin...

8.7CVSS5.8AI score0.00425EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/04/08 1:46 p.m.•9 views

CVE-2025-30151 Shopware allows Denial Of Service via password length

Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin...

7.5CVSS5.8AI score0.00425EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/08 1:46 p.m.•20 views

CVE-2025-30151 Shopware allows Denial Of Service via password length

Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin...

7.5CVSS5.8AI score0.00425EPSS
SaveExploits0References3
Adobe
Adobe
•added 2025/04/08 12:00 a.m.•56 views

APSB25-27 : Security update available for Adobe Experience Manager Forms

Adobe has released security updates for AEM Forms on JEE versions for a dependency on vulnerable Third-Party Component . This dependency update resolves an important vulnerability that could lead to path traversal and case sensitive match exception...

5.5AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•21 views

PT-2025-15600 · Unknown · Shahjada Live Forms

Name of the Vulnerable Software and Affected Versions: Shahjada Live Forms versions through 4.8.5 Description: The issue is related to a Missing Authorization vulnerability. Recommendations: For versions through 4.8.5, update to a version later than 4.8.5 to resolve the issue...

4.3CVSS5.3AI score0.00258EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•9 views

CVE-2025-32279: Missing Authorization

Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through = 4.8.5...

4.3CVSS8.6AI score0.00258EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•9 views

CVE-2025-30151: Improper Input Validation

Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin...

7.5CVSS5.8AI score0.00425EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•21 views

WordPress plugin Live Forms has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.3AI score0.00258EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/04/07 2:13 p.m.•17 views

WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Flo Forms versions = 1.0.43...

6.5CVSS8.4AI score0.00332EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/04/07 7:21 a.m.•20 views

WordPress Piotnet Forms plugin <= 1.0.30 - Path Traversal vulnerability

Path Traversal vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Piotnet Forms versions = 1.0.30...

2.7CVSS8.4AI score0.00401EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:29 p.m.•38 views

CVE-2025-32269

Cross-Site Request Forgery CSRF vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-zendesk allows Cross Site Request Forgery.This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through...

4.3CVSS7.2AI score0.00195EPSS
SaveExploits0References1
Rows per page
Query Builder