Lucene search
K

10 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/07 3:14 p.m.2 views

CVE-2026-35516

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services AWS IMDSv1, cloud metadata, internal APIs by creating a link with a publ...

5CVSS5.9AI score0.00012EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.1 views

PT-2026-30864

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services AWS IMDSv1, cloud metadata, internal APIs by creating a link with a publ...

5CVSS5.9AI score0.00012EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.1 views

WordPress plugin Blog2Social 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plug...

5.3CVSS6.7AI score0.00038EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/05 12:0 a.m.1 views

WordPress plugin WPeMatico RSS Feed Fetcher 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

6.4CVSS6.7AI score0.0005EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.1 views

WordPress plugin RSS Aggregator by Feedzy 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin RSS...

5CVSS6.9AI score0.00053EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/05/14 12:0 a.m.1 views

WordPress plugin Ninja Forms Webhooks 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

5.5CVSS6.4AI score0.0019EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/03/08 12:0 a.m.2 views

WordPress plugin Starter Templates by FancyWP 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.1CVSS8.8AI score0.0007EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/03/07 12:0 a.m.2 views

WordPress plugin Platform.ly for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.1CVSS8.8AI score0.00458EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/03/07 12:0 a.m.1 views

WordPress plugin WPGet API 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

5.5CVSS8.9AI score0.00125EPSS
Exploits0References5
OSV
OSV
added 2024/02/21 5:15 p.m.1 views

CVE-2024-20325

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

7.1CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder