Lucene search
K

66 matches found

Snyk
Snyk
added 2026/03/05 9:13 p.m.1 views

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the tag deletion. An attacker can execute arbitrary git options by supplying a crafted tag name when triggering the deletion, potentially causing unintended behavior or disruption of the underlying...

8.8CVSS6AI score0.00051EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-12019

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00116EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53531

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00137EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-30246

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00135EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-31251

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.0003EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-25433

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00209EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-36564

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00711EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-45062

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.03901EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-29680

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00207EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-31227

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.0003EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.2 views

PT-2025-39596

Name of the Vulnerable Software and Affected Versions Jennifer Moss MWW Disclaimer Buttons versions through 3.41 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious code...

5.9CVSS6.3AI score0.0003EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/08/23 12:23 a.m.3 views

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

8.6CVSS7.2AI score0.00209EPSS
Exploits0References1
NVD
NVD
added 2025/08/21 3:15 p.m.2 views

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

8.6CVSS0.00209EPSS
Exploits0References1
OSV
OSV
added 2025/08/21 3:15 p.m.2 views

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

8.6CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2025/08/21 12:0 a.m.1 views

Moss 安全漏洞

Moss is a simple and lightweight content management system open-sourced by deep-project. A security vulnerability exists in Moss versions prior to 0.15, which stems from a misconfiguration of the file upload feature that could result in the upload of arbitrary files...

8.6CVSS6.8AI score0.00209EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/21 12:0 a.m.3 views

PT-2025-34230 · Moss · Moss

Name of the Vulnerable Software and Affected Versions: Moss versions prior to 0.15 Description: Moss before version 0.15 contains a file upload issue. The configuration of the upload function permits attackers to upload files with any extension to arbitrary locations on the target server...

8.6CVSS7.4AI score0.00209EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/21 12:0 a.m.3 views

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

7.1AI score0.00209EPSS
Exploits0References1
CVE
CVE
added 2025/08/21 12:0 a.m.10 views

CVE-2025-55383

CVE-2025-55383 – Moss file upload issue : Across multiple sources, Moss versions prior to 0.15 are affected by a misconfiguration in the upload function that allows attackers to upload files with any extension to arbitrary locations on the target server. The vulnerability is described consistentl...

8.6CVSS7.1AI score0.00209EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/21 12:0 a.m.6 views

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

0.00209EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:13 a.m.3 views

CVE-2024-32428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...

5.9CVSS5.2AI score0.00135EPSS
Exploits0References1
Rows per page
Query Builder