Lucene search
+L

5054 matches found

Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•61 views

CVE-2026-25344 WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through = 2.2.6...

6.5CVSS0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 4:14 p.m.•11 views

CVE-2026-25344 WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through = 2.2.6...

5.8AI score0.0027EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:14 p.m.•36 views

CVE-2026-25344

CVE-2026-25344 affects the WordPress Review Schema plugin

6.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/25 8:49 a.m.•20 views

BIT-MYSQL-CLIENT-2026-32710 Heap-based Buffer Overflow in MariaDB

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

9.9CVSS8AI score0.00802EPSS
SaveExploits1References3
OSV
OSV
•added 2026/03/25 8:46 a.m.•11 views

BIT-MARIADB-MIN-2026-32710 Heap-based Buffer Overflow in MariaDB

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

9.9CVSS8AI score0.00802EPSS
SaveExploits1References3
OSV
OSV
•added 2026/03/25 8:46 a.m.•32 views

BIT-MARIADB-2026-32710 Heap-based Buffer Overflow in MariaDB

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

9.9CVSS8AI score0.00802EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•6 views

CVE-2026-25344: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through = 2.2.6...

6.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•22 views

PT-2026-27906

Name of the Vulnerable Software and Affected Versions RadiusTheme Review Schema versions n/a through 2.2.6 Description A flaw exists in RadiusTheme Review Schema that allows unauthorized retrieval of embedded sensitive data, potentially exposing sensitive system information. Recommendations Updat...

6.5CVSS5.9AI score0.0027EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•24 views

WordPress plugin Review Schema 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/24 11:27 a.m.•30 views

CVE-2019-25643 eNdonesia Portal v8.7 SQL Injection via banners.php

eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bid parameter. Attackers can send GET requests to banners.php with crafted SQL payloads in the bid parameter to extra...

8.8CVSS6.5AI score0.00346EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/24 11:27 a.m.•36 views

CVE-2019-25643

CVE-2019-25643 affects eNdonesia Portal v8.7 and describes multiple SQL injection vulnerabilities in banners.php via the bid parameter. The flaws allow unauthenticated attackers to execute arbitrary SQL and exfiltrate information from INFORMATION_SCHEMA tables. The vulnerability is characterized ...

8.8CVSS6.5AI score0.00346EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/24 11:27 a.m.•42 views

CVE-2019-25643 eNdonesia Portal v8.7 SQL Injection via banners.php

eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bid parameter. Attackers can send GET requests to banners.php with crafted SQL payloads in the bid parameter to extra...

8.8CVSS0.00346EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/03/24 10:16 a.m.•18 views

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

7.2CVSS6.5AI score0.01208EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/03/24 10:03 a.m.•18 views

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

7.2CVSS6.5AI score0.01208EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/03/24 9:51 a.m.•42 views

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

7.2CVSS6.5AI score0.01208EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/03/24 8:48 a.m.•35 views

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

7.2CVSS6.5AI score0.01208EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/03/24 8:48 a.m.•21 views

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

7.2CVSS6.5AI score0.01208EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/03/24 12:56 a.m.•15 views

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

7.2CVSS6.5AI score0.01208EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/03/24 12:37 a.m.•19 views

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

7.2CVSS6.5AI score0.01208EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/03/24 12:24 a.m.•15 views

SUSE CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

8.5CVSS8AI score0.00802EPSS
SaveExploits1References7
Rows per page
Query Builder