av_CVE-2020-0162_A10r33

이 저장소에는 README가 없습니다...

CVE-2010-2039

이 저장소에는 README가 없습니다...

CVE-2024-10578

CVE-2024-10578: Pubnews = 1.0.7 - 인증되지 않은 임의 플러그인 설치 설명 WordPress용 Pubnews 테마는 1.0.7 이하 모든 버전에서 pubnewsimporterpluginactionfornotice 함수에 대한 기능 확인이 누락되어 인증되지 않은 임의의 플러그인 설치에 취약합니다. 이 취약점으로 인해 구독자 수준 이상의 접근 권한을 가진 인증된 공격자가 임의의 플러그인을 설치하여 다른 취약점을 악용할 수 있습니다. CWE CWE-434: 위험한 유형의 파일 무제한 업로드 CVSS 점수:...

CVE-2019-10149

이 저장소에는 README가 없습니다...

cacti-cve-2023-39361

Cacti ™ develop ブランチから Cacti を実行する 重要 ソースコードを使用する場合、またはリポジトリから直接コードをダウンロードする場合は、データベースにテーブルやカラムが存在しないというエラーが発生した際に、データベースアップグレードスクリプトを実行することが重要です。 データベースへの変更は、新規インストールに使用される cacti.sql ファイルにコミットされ、既存インストール用のインストーラーデータベースアップグレードにもコミットされます。develop...

CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - activateplugin을 통한 인가 누락 설명 WordPress용 Square 테마는 AJAX 액션을 통해 호출되는 activateplugin 함수에 대한 권한 확인이 누락되어, 2.0.0을 포함한 이전 버전에서 허가되지 않은 플러그인 활성화에 취약합니다. 이로 인해 구독자 수준 이상의 액세스 권한을 가진 인증된 공격자가 임의의 플러그인을 활성화할 수 있습니다. Missing Authorization CVSS Vector...

CVE-2024-37010

CVE-2024-37010 CVE-2024-37010 익스플로잇: 다른 사용자의 외부 저장소 접근 및 측면 이동: https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0753/ https://owncloud.com/security-advisories/insecure-direct-object-reference-in-external-storage 소개 Owncloud는 서버를 Google Drive와 같은 파일 저장용 클라우드로 전환합니다. 이를 통해 기업은 예를 들어 제3자가 관리하지 않는...

CVE-2026-20588

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607...

CVE-2026-20527

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2026-105179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-20521

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...

By-Poloss..-..CVE-2026-12432-PoC

CVE-2026-12432: WP Full Stripe Free = 8.4.4 게시일 : 2026년 6월 26일 최종 업데이트 : 2026년 6월 27일 연구자 : Netwurm - VTDR e.V.i.G. 취약점 설명 WordPress용 WP Full Stripe Free 플러그인은 wpfsupdatefailedpaymentstatus AJAX 액션을 통해 8.4.3 이하 버전에서 권한 누락 취약점에 노출됩니다. 근본 원인 취약한 AJAX 엔드포인트는 wpajax 및 wpajaxnopriv 훅을 통해 등록됩니다: //...

CVE-2025-5961

🚨 移行・バックアップ・ステージング – WPvivid Backup & Migration 📈 この脆弱性は、700,000以上のインストール数 を誇るプラグインに影響します 📝 CVE 詳細 CVE: CVE-2025-5961 CVSS: 7.2（高） 公開日: 2025年7月3日 🔍 説明 WordPress用プラグイン Migration, Backup, Staging – WPvivid Backup & Migration は、wpvividuploadimportfiles 関数におけるファイルタイプ検証の欠如により、任意のファイルアップロード...

CVE-2022-45003

이 저장소에는 README가 없습니다...

CVE-2022-21881

이 저장소에는 README가 없습니다...

CVE-2026-105179

The SourceCodester Drug Recommendation System 1.0 is affected by a vulnerability in the Password Handler component, specifically within the Admin/add_user.php file. A manipulation of the Password argument leads to the missing encryption of sensitive data . This vulnerability is exploitable via re...

EUVD-2026-92179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-20541

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitatio...