Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-7553

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.0008EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-7552

Malicious code in bioql PyPI...

9.8CVSS5.6AI score0.00122EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/03/14 7:0 p.m.12 views

CVE-2025-2219

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

9.8CVSS6.7AI score0.0008EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/14 6:59 p.m.11 views

CVE-2025-2218

A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

9.8CVSS6.9AI score0.00122EPSS
Exploits0References1
OSV
OSV
added 2025/03/12 1:15 a.m.3 views

CVE-2025-2219

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

9.8CVSS6.7AI score
Exploits0References3
NVD
NVD
added 2025/03/12 1:15 a.m.10 views

CVE-2025-2218

A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

9.8CVSS0.00122EPSS
Exploits0References4
NVD
NVD
added 2025/03/12 1:15 a.m.14 views

CVE-2025-2219

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.0008EPSS
Exploits0References3
OSV
OSV
added 2025/03/12 1:15 a.m.4 views

CVE-2025-2218

A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

9.8CVSS6.8AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/12 12:31 a.m.9 views

CVE-2025-2219 LoveCards LoveCardsV2 image unrestricted upload

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

7.5CVSS7AI score0.0008EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/12 12:31 a.m.11 views

CVE-2025-2219 LoveCards LoveCardsV2 image unrestricted upload

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.0008EPSS
Exploits0References3
CVE
CVE
added 2025/03/12 12:31 a.m.102 views

CVE-2025-2219

CVE-2025-2219 affects LoveCards LoveCardsV2 up to 2.3.2. The issue arises from how the parameter file in /api/upload/image is processed, allowing unrestricted image uploads. It is exploitable remotely over the network (no authentication required) and, per the descriptions, the exploit has been di...

9.8CVSS7.2AI score0.0008EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/03/12 12:31 a.m.11 views

CVE-2025-2218 LoveCards LoveCardsV2 Setting other access control

A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

6.9CVSS0.00122EPSS
Exploits0References4
CVE
CVE
added 2025/03/12 12:31 a.m.78 views

CVE-2025-2218

LoveCardsV2 up to version 2.3.2 is affected by CVE-2025-2218 due to improper access controls in the /api/system/other endpoint of the Setting Handler. The vulnerability allows a remote attacker to manipulate access controls, with the issue labeled as CRITICAL (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C...

9.8CVSS5.4AI score0.00122EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/12 12:31 a.m.7 views

CVE-2025-2218 LoveCards LoveCardsV2 Setting other access control

A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

6.9CVSS6.9AI score0.00122EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/03/12 12:0 a.m.1 views

LoveCards 安全漏洞

LoveCards is a confession wall program from LoveCards open source. A security vulnerability exists in LoveCards 2.3.2 and earlier versions that stems from improper access control and could lead to a remote attack...

9.8CVSS5.4AI score0.00122EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/03/12 12:0 a.m.2 views

LoveCards 代码问题漏洞

LoveCards is an open source confession wall program by LoveCards. A code issue vulnerability exists in LoveCards 2.3.2 and earlier versions, which stems from the fact that incorrect manipulation of the parameter file can lead to unlimited uploads, potentially leading to remote attacks...

9.8CVSS7.5AI score0.0008EPSS
Exploits0References3
Rows per page
Query Builder