Lucene search
+L

4046 matches found

CVE
CVE
added 2025/08/15 2:24 a.m.36 views

CVE-2025-8680

CVE-2025-8680 concerns the WordPress plugin “B Slider – Gutenberg Slider Block for WP” where the vulnerability is a Server-Side Request Forgery (SSRF) in the fs_api_request function. The flaw affects versions up to and including 2.0.0 and requires authentication with at least subscriber-level pri...

4.3CVSS6.8AI score0.00349EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/15 12:00 a.m.20 views

PT-2025-33502 · Msoft · Msoft Mflash

Name of the Vulnerable Software and Affected Versions: MSoft MFlash version 8.0 Description: A vulnerability has been found in MSoft MFlash that allows execution of arbitrary code on the server. The issue occurs in the integration configuration functionality, which is only available to...

9.1CVSS7AI score0.00537EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-22057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.33 and prior. Easily...

4.9CVSS6.5AI score0.01372EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/14 4:15 p.m.9 views

CVE-2025-33142

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections...

7.5CVSS0.0027EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/14 11:15 a.m.7 views

CVE-2025-54679

Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free neon-channel-product-customizer-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Neon Channel Product Customizer Free: from n/a through = 2.0...

7.5CVSS0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/14 11:15 a.m.13 views

CVE-2025-47536

Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through = 7.0.0...

7.2CVSS0.00467EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.3 views

CVE-2025-54679 WordPress Neon Channel Product Customizer Free Plugin <= 2.0 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Neon Channel Product Customizer Free: from n/a through 2.0...

7.5CVSS7.1AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.27 views

CVE-2025-47536

The CVE CVE-2025-47536 concerns WordPress Content Egg plugin (v

7.2CVSS5.9AI score0.00467EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.1 views

CVE-2025-50031 WordPress DB Backup <= 6.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in syedamirhussain91 DB Backup db-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DB Backup: from n/a through = 6.0...

6.5CVSS5.1AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.20 views

CVE-2025-50031

CVE-2025-50031 concerns the WordPress plugin DB Backup, specifically versions through 6.0. The issue is a Missing Authorization / Broken Access Control vulnerability caused by incorrectly configured access control security levels, potentially enabling unauthorized access. According to Patchstack/...

6.5CVSS5.9AI score0.00316EPSS
SaveIn wildExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.8 views

PT-2025-33115 · Unknown · 1000 Projects Sales Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A vulnerability exists in an unknown functionality of the file /superstore/custcmp.php. Manipulation of the Username argument leads to a SQL injection. The attack can be launched...

9.8CVSS7.5AI score0.00505EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.7 views

PT-2025-33301 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: IBM WebSphere Application Server may provide weaker than expected security for TLS connections. Recommendations: At the moment, there is no information about a newer versi...

7.5CVSS7.1AI score0.0027EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.6 views

IBM WebSphere Application Server 信任管理问题漏洞

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A vulnerability with trust management issues exists in I...

7.5CVSS6.7AI score0.0027EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.8 views

WordPress plugin Classified Listing 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting vulnerability exists in WordPress plugin Classified Listing 5.0.0 and earlier...

5.4CVSS6.2AI score0.00183EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.10 views

PT-2025-33120 · Unknown · 1000 Projects Sales Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A SQL injection issue exists in 1000 Projects Sales Management System 1.0. The vulnerability affects an unknown functionality within the /superstore/dist/dordupdate.php file...

9.8CVSS7.5AI score0.00444EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.7 views

PT-2025-33203 · Syedamirhussain91 · Db Backup

Name of the Vulnerable Software and Affected Versions: syedamirhussain91 DB Backup versions through 6.0 Description: A missing authorization flaw in syedamirhussain91 DB Backup allows exploitation due to incorrectly configured access control security levels. Recommendations: Update to a version...

6.5CVSS7.2AI score0.00316EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.9 views

PT-2025-33112 · Unknown · 1000 Projects Sales Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A vulnerability exists in 1000 Projects Sales Management System 1.0, affecting unknown code within the /superstore/admin/sales.php file. Manipulation of the ssalescat parameter...

9.8CVSS8AI score0.00505EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.8 views

PT-2025-33170 · Unknown · Content Egg

Name of the Vulnerable Software and Affected Versions: Content Egg versions n/a through 7.0.0 Description: Deserialization of untrusted data in keywordrush Content Egg allows object injection. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

7.2CVSS6.9AI score0.00467EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.9 views

WordPress plugin SMM API 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.1CVSS4.5AI score0.00279EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.15 views

PT-2025-33418 · Sourcecodester · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester COVID 19 Testing Management System version 1.0 Description: A vulnerability exists in SourceCodester COVID 19 Testing Management System 1.0, affecting an unknown functionality within the /search-report-result.php file...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References10
Rows per page
Query Builder