Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-1869

Malware in sbrugna...

7.5CVSS7.6AI score0.0021EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-4520

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.03821EPSS
Exploits6References7
RedhatCVE
RedhatCVE
added 2025/05/22 10:10 a.m.5 views

CVE-2019-1010123

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via...

7.5CVSS7AI score0.0021EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2022/05/13 1:48 a.m.21 views

MODX Revolution Incorrect Access Control vulnerability

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...

7.2CVSS6.9AI score0.03821EPSS
Exploits6References6Affected Software1
OSV
OSV
added 2022/05/13 1:48 a.m.20 views

GHSA-M899-6MH4-MPC5 MODX Revolution Incorrect Access Control vulnerability

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...

7.2CVSS7AI score0.03821EPSS
Exploits6References6
Prion
Prion
added 2019/07/23 1:15 p.m.13 views

Design/Logic Flaw

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via...

5CVSS7.6AI score0.0021EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2019/07/23 12:36 p.m.9 views

CVE-2019-1010123

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via...

7.6AI score0.0021EPSS
Exploits1References2
VulnCheck KEV
VulnCheck KEV
added 2018/09/26 12:0 a.m.1 views

VulnCheck KEV: CVE-2018-1000207

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability...

7.2CVSS7AI score0.03821EPSS
Exploits6References1
OSV
OSV
added 2018/07/13 6:29 p.m.18 views

CVE-2018-1000207

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...

7.2CVSS6.8AI score0.03821EPSS
Exploits6References4
Prion
Prion
added 2018/07/13 6:29 p.m.13 views

Improper access control

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...

6.5CVSS6.9AI score0.03821EPSS
Exploits6References4Affected Software1
Cvelist
Cvelist
added 2018/07/13 6:0 p.m.13 views

CVE-2018-1000207

MODX Revolution version =2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appea...

7AI score0.03821EPSS
Exploits6References4
Rows per page
Query Builder