Lucene search
K

41 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:47 p.m.6 views

CVE-2026-6648

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS3.9AI score0.00195EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/20 3:31 p.m.4 views

EUVD-2026-23844

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00195EPSS
Exploits0References5
NVD
NVD
added 2026/04/20 1:16 p.m.4 views

CVE-2026-6648

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS0.00195EPSS
Exploits0References4
CVE
CVE
added 2026/04/20 1:0 p.m.5 views

CVE-2026-6648

CVE-2026-6648 affects Qibo CMS 1.0, specifically the Internal Message Module. The issue is a cross-site scripting vulnerability triggered by manipulating the module’s functionality. The attack is described as remotely initiable, with a publicly available exploit. Details on affected versions are ...

5.1CVSS4.1AI score0.00195EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/20 1:0 p.m.4 views

CVE-2026-6648

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00195EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/20 1:0 p.m.3 views

CVE-2026-6648 Qibo CMS Internal Message cross site scripting

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00195EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/20 12:0 a.m.7 views

Qibo CMS 安全漏洞

Qibo CMS is a content management system developed by Qibo CMS Inc., designed for website construction and content publishing. Version 1.0 of Qibo CMS has a security vulnerability, which stems from improper handling of an unknown feature of the Internal Message Module component. This vulnerability...

5.1CVSS5.5AI score0.00195EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.3 views

PT-2026-33760

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00195EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/09 3:35 p.m.6 views

EUVD-2025-209380

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

5.9AI score0.00275EPSS
Exploits0References4
NVD
NVD
added 2026/04/09 3:16 p.m.2 views

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

9.1CVSS0.00275EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/09 12:0 a.m.3 views

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

5.8AI score0.00275EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/09 12:0 a.m.18 views

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

0.00275EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/09 12:0 a.m.1 views

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery SSRF in User Evaluation, Message, and Comment modules...

5.9AI score0.00275EPSS
Exploits0References4
CVE
CVE
added 2026/04/09 12:0 a.m.8 views

CVE-2025-50228

CVE-2025-50228 affects Jizhicms v2.5.4. Multiple connected sources describe a vulnerability classified as Server-Side Request Forgery (SSRF) in the User Evaluation, Message, and Comment modules. The primary CVE notes a high-severity impact (CVSS v3.1: 9.1, CRITICAL) with network access, no user i...

9.1CVSS5.9AI score0.00275EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2004-1461

Malware in sbrugna...

4.3CVSS6.2AI score0.0362EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-4951

Malware in sbrugna...

4.8CVSS5.1AI score0.00935EPSS
Exploits3References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2022-43750

Malicious code in bioql PyPI...

8CVSS7.9AI score0.00904EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/06/07 6:2 a.m.18 views

CVE-2025-3054

The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload...

8.8CVSS8AI score0.00779EPSS
Exploits1References1
NVD
NVD
added 2025/06/05 6:15 a.m.21 views

CVE-2025-3054

The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload...

8.8CVSS0.00779EPSS
Exploits1References2
OSV
OSV
added 2024/09/18 2:15 p.m.2 views

CVE-2024-31196

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::ActionList::unpack10. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00401EPSS
Exploits0References1
Rows per page
Query Builder