Lucene search
+L

9114 matches found

CNNVD
CNNVD
added 2025/12/22 12:00 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an invalid PNP driver deregistration, which could lead to a driver deregistration error...

6AI score0.00193EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/12/12 6:31 a.m.13 views

EUVD-2025-202996

The App Landing Template Blocks for WPBakery Visual Composer Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvcvideoplay' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS4.5AI score0.00211EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/12 4:15 a.m.27 views

CVE-2025-14119

The App Landing Template Blocks for WPBakery Visual Composer Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvcvideoplay' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS0.00211EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/12 3:20 a.m.46 views

CVE-2025-14119 App Landing Template Blocks for WPBakery Page Builder <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The App Landing Template Blocks for WPBakery Visual Composer Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvcvideoplay' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS0.00211EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/12 3:20 a.m.10 views

CVE-2025-14119 App Landing Template Blocks for WPBakery Page Builder <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The App Landing Template Blocks for WPBakery Visual Composer Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvcvideoplay' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS4.6AI score0.00211EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/12 12:00 a.m.15 views

PT-2025-50851

The App Landing Template Blocks for WPBakery Visual Composer Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvc video play' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS4.9AI score0.00211EPSS
SaveExploits0References4
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2025/12/10 11:48 a.m.18 views

Minor update(3) for Vivaldi Android Browser 7.7

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the second 7.7 minor update: RegressionTablet Does not...

8.8CVSS5.9AI score0.22632EPSS
SaveExploits10References1
NVD
NVD
added 2025/12/05 6:15 p.m.11 views

CVE-2020-36877

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user. Attackers can upload PHP executable files via the Quick File Uploader page, resulting in remote code execution on...

9.3CVSS0.00702EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/12/05 5:17 p.m.9 views

EUVD-2020-30826

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...

8.7CVSS5.9AI score0.00338EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/05 5:17 p.m.3 views

CVE-2020-36878 ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...

8.7CVSS6AI score0.00338EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/12/05 5:17 p.m.32 views

CVE-2020-36878 ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local...

8.7CVSS0.00338EPSS
SaveExploits1References3
CVE
CVE
added 2025/12/05 5:16 p.m.20 views

CVE-2020-36877

CVE-2020-36877 affects ReQuest Serious Play F3 Media Server 7.0.3, with an unauthenticated remote code execution vulnerability. An attacker can upload PHP executables via the Quick File Uploader page (/tools/upload.html), resulting in code execution as the web server user. The vulnerability descr...

9.3CVSS8.7AI score0.00702EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/12/05 5:16 p.m.11 views

EUVD-2020-30827

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user. Attackers can upload PHP executable files via the Quick File Uploader page, resulting in remote code execution on...

9.3CVSS8.5AI score0.00702EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/05 5:16 p.m.34 views

CVE-2020-36877 ReQuest Serious Play F3 Media Server <= 7.0.3 code execution

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user. Attackers can upload PHP executable files via the Quick File Uploader page, resulting in remote code execution on...

9.3CVSS0.00702EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/05 5:13 p.m.4 views

CVE-2020-36876 ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 Pro, 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running...

8.7CVSS6.3AI score0.00366EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/05 5:13 p.m.31 views

CVE-2020-36876 ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 Pro, 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running...

8.7CVSS0.00366EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/12/05 5:13 p.m.9 views

EUVD-2020-30828

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 Pro, 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running...

8.7CVSS6.2AI score0.00366EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/05 12:00 a.m.13 views

ReQuest Serious Play F3 Media Server 日志信息泄露漏洞

ReQuest Serious Play F3 Media Server is a digital media server from ReQuest Serious Play USA. A log information disclosure vulnerability exists in ReQuest Serious Play F3 Media Server versions 7.0.3.4968, 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823, which originates from an...

8.7CVSS6AI score0.00366EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/05 12:00 a.m.14 views

ReQuest Serious Play Media Player 安全漏洞

ReQuest Serious Play Media Player is a media player software from ReQuest Serious Play, Inc. A security vulnerability exists in ReQuest Serious Play Media Player version 3.0 that stems from not properly validating file parameters, which could allow an attacker to read the contents of a local file...

8.7CVSS6.2AI score0.00338EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/05 12:00 a.m.14 views

ReQuest Serious Play F3 Media Server 操作系统命令注入漏洞

ReQuest Serious Play F3 Media Server is a digital media server from ReQuest Serious Play, Inc. An operating system command injection vulnerability exists in ReQuest Serious Play F3 Media Server version 7.0.3, which originates from unauthenticated remote code execution and could lead to an attacke...

9.3CVSS8.5AI score0.00702EPSS
SaveExploits1References5
Rows per page
Query Builder