Lucene search
+L

856 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/04/02 6:12 a.m.11 views

Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products

Overview HMI ViewJet C-more series and HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contain multiple vulnerabilities listed below. Improper Restriction of Rendered UI Layers or Frames CWE-1021 - CVE-2025-24310 Allocation of Resources Without Limits or Throttling CWE-770 -...

6.5CVSS7AI score0.00575EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/04/02 12:00 a.m.17 views

PT-2025-14826 · Unknown · Hmi Gc-A2 Series +1

Name of the Vulnerable Software and Affected Versions: HMI ViewJet C-more series affected versions not specified HMI GC-A2 series affected versions not specified Description: The issue is related to an unintended proxy or intermediary problem, also known as 'Confused Deputy', which may allow a...

5.8CVSS5.6AI score0.00429EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.16 views

The vulnerability of the C-more Programming Software for programming and configuring sensor panels (EA9 Series) lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the C-more Programming Software for programming and configuring sensor panels EA9 Series is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created EAP9 format files...

7.8CVSS8AI score0.00307EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.17 views

The vulnerability of the C-more Programming Software for programming and configuring sensor panels (EA9 Series) lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the C-more Programming Software for programming and configuring sensor panels EA9 Series is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created EAP9 format files...

7.8CVSS8AI score0.00278EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/03/15 5:15 a.m.10 views

CVE-2025-1771

The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotelaloneloadmorepost' function 'style' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

9.8CVSS7.8AI score0.00659EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/03 2:15 p.m.5 views

CVE-2025-25083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dave Lavoie EP4 More Embeds ep4-more-embeds allows Stored XSS.This issue affects EP4 More Embeds: from n/a through = 1.0.0...

7.1CVSS0.00378EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.19 views

CVE-2025-25083 WordPress EP4 More Embeds Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dave Lavoie EP4 More Embeds ep4-more-embeds allows Stored XSS.This issue affects EP4 More Embeds: from n/a through = 1.0.0...

7.1CVSS0.00378EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.53 views

CVE-2025-25083

Summary: CVE-2025-25083 affects the WordPress EP4 More Embeds plugin (versions &lt;= 1.0.0). The vulnerability is a Stored Cross-Site Scripting (XSS) caused by improper neutralization of input during web page generation. Affected software: WordPress EP4 More Embeds plugin (

7.1CVSS5.9AI score0.00378EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.6 views

WordPress plugin EP4 More Embeds 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.8AI score0.00378EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/02/27 3:10 a.m.8 views

SUSE CVE-2022-49204

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more data after tcpbpfsendmsgredir: tcpbpfsendverdict tosend = msg-sg.size //msg-sg.size = 22220 case SKREDIRECT: skmsgreturn //uncharged...

5.5CVSS6.7AI score0.00264EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/13 9:15 a.m.6 views

CVE-2024-13639

The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access...

4.3CVSS7.4AI score0.00329EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/13 5:15 a.m.8 views

CVE-2024-13770

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of untrusted input 'viewmoreposts' AJAX action. This makes it possible for unauthenticated attackers to...

9.8CVSS7.5AI score0.00818EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/13 12:00 a.m.12 views

PT-2025-6589 · WordPress · Read More & Accordion

Name of the Vulnerable Software and Affected Versions: Read More & Accordion plugin for WordPress versions up to, and including, 3.4.2 Description: The issue is related to a missing capability check on the expmDeleteData function, which allows authenticated attackers with Subscriber-level access...

4.3CVSS9AI score0.00329EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.10 views

WordPress plugin Read More & Accordion 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin Read More & Accordion versio...

4.3CVSS8AI score0.00329EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/02/12 9:46 p.m.6 views

WordPress Read More & Accordion plugin <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary 'Read More' Post Deletion vulnerability discovered by theviper17y in WordPress Plugin Read More & Accordion versions = 3.4.2...

4.3CVSS7AI score0.00329EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/02/12 7:15 a.m.21 views

CVE-2025-1183

A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of the argument loginid leads to sql injection. The attack can be launche...

9.8CVSS6.5AI score0.00539EPSS
SaveExploits1References4
CVE
CVE
added 2025/02/12 6:58 a.m.75 views

CVE-2025-1183

CVE-2025-1183 affects CodeZips Gym Management System 1.0. The vulnerability lies in the parameter login_id in file /dashboard/admin/more-userprofile.php , enabling remote SQL injection via an input that is not properly validated. Reported impact includes high confidentiality, integrity, and avail...

9.8CVSS6.8AI score0.00539EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/10 12:00 a.m.17 views

PT-2025-6055 · Codezips · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: CodeZips Gym Management System version 1.0 Description: A critical vulnerability has been found in the CodeZips Gym Management System, affecting an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of t...

9.8CVSS7.2AI score0.00539EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2025/02/09 10:19 a.m.6 views

CVE-2025-25148

Cross-Site Request Forgery CSRF vulnerability in ElbowRobo Read More Copy Link read-more-copy-link allows Stored XSS.This issue affects Read More Copy Link: from n/a through = 1.0.2...

7.1CVSS7.2AI score0.00139EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/07 10:15 a.m.12 views

CVE-2025-25148

Cross-Site Request Forgery CSRF vulnerability in ElbowRobo Read More Copy Link read-more-copy-link allows Stored XSS.This issue affects Read More Copy Link: from n/a through = 1.0.2...

7.1CVSS0.00139EPSS
SaveExploits0References1
Rows per page
Query Builder