Lucene search
K

8 matches found

Cvelist
Cvelist
added 2026/05/25 2:15 p.m.21 views

CVE-2018-25381 Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters

Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters. Attackers can inject malicious SQL code via the filtertypeid, filterpidid, and filtersearch parameters in POST reques...

7.1CVSS0.00284EPSS
Exploits0References4
NVD
NVD
added 2026/04/08 9:16 a.m.5 views

CVE-2026-39634

Cross-Site Request Forgery CSRF vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request Forgery.This issue affects Grand Portfolio: from n/a through = 3.3...

5.4CVSS0.00104EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 8:30 a.m.3 views

EUVD-2026-20289

Cross-Site Request Forgery CSRF vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request Forgery.This issue affects Grand Portfolio: from n/a through = 3.3...

5.9AI score0.00104EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.1 views

CVE-2026-32437

Missing Authorization vulnerability in vowelweb VW Portfolio vw-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Portfolio: from n/a through = 1.3.3...

5.3CVSS5.8AI score0.00243EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/30 12:30 p.m.1 views

EUVD-2025-205755

Missing Authorization vulnerability in designthemes WeDesignTech Portfolio wedesigntech-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Portfolio: from n/a through = 1.0.2...

8.1CVSS6.5AI score0.00219EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/07/31 11:23 a.m.6 views

WordPress Cube Portfolio Plugin <= 1.16.8 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Cube Portfolio versions = 1.16.8...

8.5CVSS7.8AI score0.00243EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/01/16 9:15 p.m.4 views

CVE-2025-23865

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pressfore Winning Portfolio winning-portfolio allows Stored XSS.This issue affects Winning Portfolio: from n/a through = 1.1...

6.5CVSS0.00357EPSS
Exploits0References1
CNVD
CNVD
added 2018/05/10 12:0 a.m.2 views

Oracle Financial Services Applications Financial Services Basel Regulatory Capital Basic Component Unauthorized Operation Vulnerability (CNVD-2018-10744)

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation that combines core banking, online banking, and estate management.Financial Services Basel Regulatory Capital Basic is one of the Basel-based capital adequacy management component. A security...

8.1CVSS6.8AI score0.02002EPSS
Exploits0References1
Rows per page
Query Builder