Lucene search
+L

12917 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•5 views

CVE-2025-50009: Missing Authorization

Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: from n/a through = 1.5.3...

5.4CVSS5.9AI score0.0032EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/20 12:00 a.m.•14 views

CVE-2025-45890

Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter...

9.8CVSS8.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/20 12:00 a.m.•17 views

PT-2025-26439 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel plus versions prior to 5.1.0 Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code via the filePath parameter. This enables the attacker to potentially access and manipulate files outside the intend...

9.8CVSS7.5AI score0.01558EPSS
SaveExploits1References5
Patchstack
Patchstack
•added 2025/06/19 4:30 p.m.•20 views

WordPress Kata Plus plugin <= 1.5.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Kata Plus versions = 1.5.3...

5.4CVSS6.7AI score0.0032EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/06/19 3:21 p.m.•26 views

CVE-2025-49856

Cross-Site Request Forgery CSRF vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Cross Site Request Forgery.This issue affects Responsive Plus: from n/a through = 3.2.2...

4.3CVSS5.9AI score0.00136EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/06/19 3:39 a.m.•11 views

SUSE CVE-2022-50204

In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: pdata-quirks: Fix refcount leak bug In pdataquirksinitclocks, the loop contains offindnodebyname but without corresponding ofnodeput...

5.5CVSS6.3AI score0.00246EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/06/19 12:00 a.m.•15 views

PT-2025-33804

Content removed...

9.8CVSS6.5AI score0.09567EPSS
SaveExploits2References235
GithubExploit
GithubExploit
•added 2025/06/18 7:59 p.m.•406 views

Exploit for Uncontrolled Search Path Element in Notepad-Plus-Plus Notepad\+\+

⚠️ IMPORTANT NOTICE: For security research and educational p...

7.8CVSS6.7AI score0.00332EPSS
SaveExploits1
OSV
OSV
•added 2025/06/18 11:15 a.m.•10 views

DEBIAN-CVE-2022-50204

In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: pdata-quirks: Fix refcount leak bug In pdataquirksinitclocks, the loop contains offindnodebyname but without corresponding ofnodeput...

5.5CVSS5.3AI score0.00246EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/06/18 11:03 a.m.•25 views

CVE-2022-50198

In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix refcount leak in omap3xxxprmlateinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

5.5CVSS5.3AI score0.00243EPSS
SaveExploits0
NVD
NVD
•added 2025/06/17 3:15 p.m.•14 views

CVE-2025-49856

Cross-Site Request Forgery CSRF vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Cross Site Request Forgery.This issue affects Responsive Plus: from n/a through = 3.2.2...

4.3CVSS0.00136EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/17 3:01 p.m.•43 views

CVE-2025-49856

CVE-2025-49856 describes a Cross-Site Request Forgery (CSRF) vulnerability in CyberChimps Responsive Plus (affected: 3.2.2 and earlier). The issue enables unauthorized actions via forged requests initiated by an authenticated user, potentially affecting Settings changes. Public details explicitly...

4.3CVSS5.9AI score0.00136EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/17 3:01 p.m.•6 views

CVE-2025-49856 WordPress Responsive Plus plugin <= 3.2.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in CyberChimps Responsive Plus allows Cross Site Request Forgery. This issue affects Responsive Plus: from n/a through 3.2.2...

4.3CVSS4.6AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/17 3:01 p.m.•29 views

CVE-2025-49856 WordPress Responsive Plus plugin <= 3.2.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Cross Site Request Forgery.This issue affects Responsive Plus: from n/a through = 3.2.2...

4.3CVSS0.00136EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/17 12:00 a.m.•13 views

WordPress plugin Responsive Plus 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

4.3CVSS4.9AI score0.00136EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/17 12:00 a.m.•3 views

CVE-2025-49856: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Cross Site Request Forgery.This issue affects Responsive Plus: from n/a through = 3.2.2...

4.3CVSS5.8AI score0.00136EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/15 10:14 p.m.•17 views

CVE-2025-24919

A deserialization of untrusted input vulnerability exists in the cvhDecapsulateCmd functionality of Dell ControlVault3 prior to 5.15.10.14 and ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault response to a command can lead to arbitrary code execution. An attacker can...

8.1CVSS8AI score0.02574EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/13 12:00 a.m.•21 views

Dell ControlVault3和Dell ControlVault3 Plus 缓冲区错误漏洞

Dell ControlVault3 and Dell ControlVault3 Plus are both hardware-based security solutions from Dell USA. A buffer error vulnerability exists in Dell ControlVault3 versions prior to 5.15.10.14 and Dell ControlVault3 Plus versions prior to 6.2.26.36, which stems from an out-of-bounds write to the...

8.8CVSS8AI score0.02139EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/06/13 12:00 a.m.•16 views

Dell ControlVault3和Dell ControlVault3 Plus 安全漏洞

Dell ControlVault3 and Dell ControlVault3 Plus are both hardware-based security solutions from Dell USA. A security vulnerability exists in Dell ControlVault3 versions prior to 5.15.10.14 and Dell ControlVault3 Plus versions prior to 6.2.26.36, which stems from a stack buffer overflow in the...

8.8CVSS8AI score0.03381EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/06/13 12:00 a.m.•23 views

The vulnerability of the Content Search module of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus allows a hacker to execute arbitrary code.

The vulnerability of the Content Search module in the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus relates to the unlimited download of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02231EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder