Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/01/03 3:07 p.m.•17 views

CVE-2025-15438

A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::destruct of the file core/admin/medias.php of the component Media Management Module. Executing a manipulation of the argument File can lead to deserialization. The attack can be launched remotely. The...

7.2CVSS4.6AI score0.00468EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/02 3:15 p.m.•15 views

CVE-2025-15438

A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::destruct of the file core/admin/medias.php of the component Media Management Module. Executing a manipulation of the argument File can lead to deserialization. The attack can be launched remotely. The...

7.2CVSS0.00468EPSS
SaveExploits1References4
OSV
OSV
•added 2026/01/02 3:15 p.m.•15 views

UBUNTU-CVE-2025-15438

A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::destruct of the file core/admin/medias.php of the component Media Management Module. Executing a manipulation of the argument File can lead to deserialization. The attack can be launched remotely. The...

7.2CVSS5.5AI score0.00468EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/02 12:00 a.m.•16 views

PluXml 代码问题漏洞

PluXml is a free open source content management system from PluXml Open Source that does not require a database to work. A code issue vulnerability exists in PluXml 5.8.22 and earlier versions, which stems from incorrect manipulation of the parameter File within the file core/admin/medias.php in...

7.2CVSS4.9AI score0.00468EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/02 12:00 a.m.•1 views

CVE-2025-15438: Deserialization of Untrusted Data

A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::destruct of the file core/admin/medias.php of the component Media Management Module. Executing a manipulation of the argument File can lead to deserialization. The attack can be launched remotely. The...

7.2CVSS4.9AI score0.00468EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•10 views

PT-2024-40122 · Neos · Neos

Name of the Vulnerable Software and Affected Versions: Neos versions 2.0.x Description: The issue allows for several XSS attacks, enabling an attacker to tamper with page rendering, redirect victims to a fake login page, or capture user credentials. An attacker could also gain access to the serve...

5.8AI score
SaveExploits0References4
Rows per page
Query Builder