Lucene search
+L

357 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:12 p.m.•28 views

CVE-2026-39440

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS6AI score0.00364EPSS
SaveExploits1References1
NVD
NVD
•added 2026/05/21 9:16 a.m.•51 views

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS0.0012EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/21 8:07 a.m.•20 views

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS5.8AI score0.0012EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/21 12:00 a.m.•9 views

CVE-2026-9157: Improper Input Validation

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS5.8AI score0.0012EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/21 12:00 a.m.•42 views

PT-2026-42443

Name of the Vulnerable Software and Affected Versions Gmission Web Fax versions 3.0 through 3.0 Description Improper input validation and unrestricted upload of files with dangerous types allow Remote Code Inclusion, a process where an attacker can force the application to execute code from a...

8.6CVSS6.2AI score0.0012EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/05/14 5:48 p.m.•16 views

CVE-2025-15024

Improper Control of Generation of Code 'Code Injection' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22....

8.8CVSS5.8AI score0.00246EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/05/14 5:48 p.m.•43 views

EUVD-2025-209859

Improper Control of Generation of Code 'Code Injection' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22....

8.8CVSS5.8AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/14 5:48 p.m.•36 views

CVE-2025-15024

The CVE-2025-15024 entry concerns the Library Automation System from Yordam Information Technology (library management software). Affected versions are 19.5 up to but not including 22.1. The vulnerability is described as an improper control of code generation, i.e., a Code Injection issue that en...

8.8CVSS5.9AI score0.00246EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•10 views

CVE-2025-15024: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22....

8.8CVSS5.9AI score0.00246EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/23 3:38 p.m.•95 views

EUVD-2026-25220

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS5.8AI score0.00364EPSS
SaveExploits1References2
NVD
NVD
•added 2026/04/23 1:16 p.m.•87 views

CVE-2026-39440

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS0.00364EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/23 12:11 p.m.•75 views

CVE-2026-39440

Summary: CVE-2026-39440 affects the WordPress plugin FunnelFormsPro (FunnelForms LLC) up to version 3.8.1. The issue is an improper control of code generation (code injection) that enables Remote Code Inclusion, effectively a Remote Code Execution vulnerability. The description indicates the affe...

9.9CVSS5.9AI score0.00364EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/23 12:00 a.m.•10 views

CVE-2026-39440: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS5.8AI score0.00364EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/21 12:00 a.m.•50 views

PT-2026-34660

Name of the Vulnerable Software and Affected Versions FunnelFormsPro versions n/a through 3.8.1 Description Improper Control of Generation of Code allows Remote Code Inclusion, which enables an attacker to inject and execute arbitrary code. Recommendations At the moment, there is no information...

9.9CVSS6.1AI score0.00364EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
•added 2026/03/26 5:04 p.m.•15 views

CVE-2026-25001

Improper Control of Generation of Code 'Code Injection' vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through = 4.0.12...

8.5CVSS5.8AI score0.00243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 5:02 p.m.•18 views

CVE-2026-27044

Improper Control of Generation of Code 'Code Injection' vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through = 4.12.0...

9.9CVSS5.8AI score0.00307EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:18 p.m.•23 views

CVE-2026-32367

Improper Control of Generation of Code 'Code Injection' vulnerability in Yannick Lefebvre Modal Dialog modal-dialog allows Remote Code Inclusion.This issue affects Modal Dialog: from n/a through = 3.5.16...

9.1CVSS5.8AI score0.00422EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:17 p.m.•21 views

CVE-2026-32414

Improper Control of Generation of Code 'Code Injection' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Remote Code Inclusion.This issue affects Advanced Woo Labels: from n/a through = 2.36...

7.2CVSS5.8AI score0.00422EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•20 views

EUVD-2026-15759

Improper Control of Generation of Code 'Code Injection' vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through = 4.12.0...

9.9CVSS5.8AI score0.00307EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•27 views

EUVD-2026-15609

Improper Control of Generation of Code 'Code Injection' vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through = 4.0.12...

8.5CVSS5.8AI score0.00243EPSS
SaveExploits0References2
Rows per page
Query Builder