Lucene search
+L

2903 matches found

CNNVD
CNNVD
added 2025/05/23 12:00 a.m.12 views

WordPress plugin Leadinfo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.4AI score0.00293EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 9:53 p.m.14 views

CVE-2022-36120

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the getChartData administrative...

8.1CVSS6.9AI score0.00993EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:08 p.m.11 views

CVE-2021-45640

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 befor...

7.2CVSS7.1AI score0.00624EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:37 p.m.9 views

CVE-2021-35064

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg...

10CVSS7.4AI score0.70753EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:24 p.m.12 views

CVE-2020-11633

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges...

10CVSS10AI score0.01891EPSS
SaveExploits0References1
HackRead
HackRead
added 2025/05/22 4:07 p.m.25 views

Database Leak Reveals 184 Million Infostealer-Harvested Emails and Passwords

Cybersecurity researcher Jeremiah Fowler discovered a misconfigured cloud server containing a massive 184 million login credentials, likely collected…...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:53 a.m.15 views

CVE-2018-5353

The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spoofing. It does not authenticate the intended server before opening a browser window. An unauthenticated attacker capable of conducting a...

9.8CVSS8.1AI score0.11149EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/05/22 12:00 a.m.13 views

Tridium Niagara Framework和Tridium Niagara Enterprise Security 安全漏洞

Tridium Niagara Framework and Tridium Niagara Enterprise Security are both products of Tridium, Inc.Tridium Niagara Framework is a comprehensive software infrastructure that solves the challenges of creating appliance to enterprise applications. Tridium Niagara Enterprise Security is a...

9.8CVSS6.8AI score0.00388EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/19 3:15 p.m.6 views

CVE-2025-48272

Missing Authorization vulnerability in wpjobportal WP Job Portal allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Job Portal: from n/a through 2.3.2...

5.3CVSS5.8AI score0.00313EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/17 12:00 a.m.8 views

WordPress plugin MultiVendorX – WooCommerce Multivendor Marketplace Solutions 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in WordPress plugin MultiVendorX -...

4.3CVSS7.9AI score0.00293EPSS
SaveExploits0References5
OSV
OSV
added 2025/05/16 4:15 p.m.7 views

CVE-2025-48138

Missing Authorization vulnerability in berthaai BERTHA AI allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BERTHA AI: from n/a through 1.12.11...

8.8CVSS7.3AI score0.00333EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/16 4:15 p.m.10 views

CVE-2025-39482

Missing Authorization vulnerability in imithemes Eventer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventer: from n/a before 3.11.4...

8.8CVSS5.8AI score0.00495EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/16 12:00 a.m.7 views

WordPress plugin MapSVG 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5CVSS6.2AI score0.00301EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/16 12:00 a.m.11 views

WordPress plugin Pinterest Automatic Pin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS6AI score0.00283EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/08 4:15 p.m.33 views

CVE-2025-4132

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/07 7:14 p.m.24 views

CVE-2024-42213

HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure...

5.3CVSS6.8AI score0.00295EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.10 views

WordPress plugin Ovation Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6AI score0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.5 views

WordPress plugin ContentStudio 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6AI score0.00232EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/05 7:15 p.m.8 views

CVE-2024-42213

HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure...

5.3CVSS5.8AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/05 7:15 p.m.16 views

CVE-2024-42213

HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure...

5.3CVSS0.00295EPSS
SaveExploits0References1
Rows per page
Query Builder