Lucene search
+L

505 matches found

ossf
ossf
added 4 days ago7 views

Malicious code in jupiter-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e0901ca45da110106c60f288b0166fc51c348a44569d7e7ff22af3d19deafe On import jupitersdk, the package's top-level init.py fetches a payload over HTTPS from a public IPFS gateway...

6.6AI score
Exploits0References3
redhatcve
redhatcve
added 2026/03/26 3:3 p.m.5 views

CVE-2026-3533

The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on importpopuptemplates function as well as insufficient file type validation in the uploadfiles function in all versions up to, and including, 4.14.1. This makes it possible for Authenticat...

8.8CVSS5.9AI score0.00676EPSS
Exploits0References1
euvd
euvd
added 2026/03/24 12:30 a.m.8 views

EUVD-2026-14650

The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on importpopuptemplates function as well as insufficient file type validation in the uploadfiles function in all versions up to, and including, 4.14.1. This makes it possible for Authenticat...

8.8CVSS5.9AI score0.00676EPSS
Exploits0References5
nvd
nvd
added 2026/03/24 12:16 a.m.8 views

CVE-2026-3533

The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on importpopuptemplates function as well as insufficient file type validation in the uploadfiles function in all versions up to, and including, 4.14.1. This makes it possible for Authenticat...

8.8CVSS0.00676EPSS
Exploits0References4
cnnvd
cnnvd
added 2026/03/24 12:0 a.m.8 views

WordPress plugin Jupiter X Core 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS6.3AI score0.00676EPSS
Exploits0References4
vulnrichment
vulnrichment
added 2026/03/23 11:25 p.m.4 views

CVE-2026-3533 JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import

The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on importpopuptemplates function as well as insufficient file type validation in the uploadfiles function in all versions up to, and including, 4.14.1. This makes it possible for Authenticat...

8.8CVSS5.9AI score0.00676EPSS
Exploits0References4
cve
cve
added 2026/03/23 11:25 p.m.15 views

CVE-2026-3533

CVE-2026-3533 (Jupiter X Core WordPress plugin) is a vulnerability in all versions up to 4.14.1 where limited file uploads are possible due to missing authorization on import_popup_templates() and inadequate file-type validation in upload_files(). Authenticated users with Subscriber-level access ...

8.8CVSS5.9AI score0.00676EPSS
Exploits0References4
attackerkb
attackerkb
added 2026/03/23 11:25 p.m.3 views

CVE-2026-3533

The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on importpopuptemplates function as well as insufficient file type validation in the uploadfiles function in all versions up to, and including, 4.14.1. This makes it possible for Authenticat...

8.8CVSS5.9AI score0.00676EPSS
Exploits0References5
cvelist
cvelist
added 2026/03/23 11:25 p.m.33 views

CVE-2026-3533 JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import

The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on importpopuptemplates function as well as insufficient file type validation in the uploadfiles function in all versions up to, and including, 4.14.1. This makes it possible for Authenticat...

8.8CVSS0.00676EPSS
Exploits0References4
ptsecurity
ptsecurity
added 2026/03/23 12:0 a.m.5 views

PT-2026-27264

Name of the Vulnerable Software and Affected Versions Jupiter X Core plugin for WordPress versions through 4.14.1 Description The Jupiter X Core plugin for WordPress is susceptible to limited file uploads because of missing authorization in the import popup templates function and inadequate file...

8.8CVSS6AI score0.00676EPSS
Exploits0References8
redhatcve
redhatcve
added 2026/01/09 10:42 a.m.14 views

CVE-2022-26107

When a user opens a manipulated Jupiter Tesselation .jt, JTReader.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.5CVSS6.8AI score0.00972EPSS
Exploits0References1
redhatcve
redhatcve
added 2026/01/09 9:20 a.m.17 views

CVE-2021-27587

When a user opens manipulated Jupiter Tessellation .JT format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

7.8CVSS6.8AI score0.0137EPSS
Exploits0References1
euvd
euvd
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-178240

Malicious code in jupiter-scripts-html-webpack-plugin-blitz npm...

6.6AI score
Exploits0
euvd
euvd
added 2025/11/13 3:23 a.m.3 views

EUVD-2025-180398

Malicious code in apex-fork-jupiter-winston npm...

6.6AI score
Exploits0
euvd
euvd
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-180039

Malicious code in blackhole-jupiter-spectron-webdriver-meteor npm...

6.6AI score
Exploits0
euvd
euvd
added 2025/11/13 3:23 a.m.3 views

EUVD-2025-178589

Malicious code in hawkingradiation-jupiter-morgan-equinox npm...

6.6AI score
Exploits0
euvd
euvd
added 2025/11/13 3:23 a.m.4 views

EUVD-2025-178242

Malicious code in jupiter-aether-markdown-pdf-websockets npm...

6.6AI score
Exploits0
euvd
euvd
added 2025/11/13 3:23 a.m.3 views

EUVD-2025-177213

Malicious code in phoebe-coronalmassejection-lightyear-jupiter npm...

6.6AI score
Exploits0
euvd
euvd
added 2025/11/13 3:23 a.m.2 views

EUVD-2025-176903

Malicious code in pulsar-mocha-saturnology-jupiter npm...

6.6AI score
Exploits0
euvd
euvd
added 2025/11/13 3:23 a.m.12 views

EUVD-2025-177892

Malicious code in mesosphere-jupiter-sirius-spinner npm...

6.6AI score
Exploits0
Rows per page
Query Builder