Lucene search
+L

31368 matches found

Cvelist
Cvelist
added 2025/11/06 3:53 p.m.22 views

CVE-2025-48086 WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.This issue affects Ajax Search Lite: from n/a through = 4.13.3...

5.5CVSS0.00236EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:53 p.m.6 views

CVE-2025-48086 WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.This issue affects Ajax Search Lite: from n/a through = 4.13.3...

5.5CVSS6.6AI score0.00236EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/06 3:53 p.m.12 views

EUVD-2025-38020

Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.This issue affects Ajax Search Lite: from n/a through = 4.13.3...

6.5AI score0.00236EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/06 6:45 a.m.15 views

CVE-2025-12471 Hubbub Lite <= 1.36.0 - Reflected Cross-Site Scripting

The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsplistattentionsearch' parameter in all versions up to, and including, 1.36.0 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS0.00249EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/06 6:45 a.m.8 views

EUVD-2025-37978

The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsplistattentionsearch' parameter in all versions up to, and including, 1.36.0 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS5.2AI score0.00249EPSS
SaveExploits0References4
Fedora
Fedora
added 2025/11/06 2:24 a.m.6 views

[SECURITY] Fedora 42 Update: keepassxc-2.7.10-4.fc42

KeePassXC is a community fork of KeePassX KeePassXC is an application for people with extremely high demands on secure personal data management. KeePassXC saves many different information e.g. user names, passwords, urls, attachemts and comments in one single database. For a better management...

6.8AI score
SaveExploits0
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.11 views

WordPress plugin Ajax Search Lite 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

5.5CVSS6.9AI score0.00236EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.13 views

PT-2025-45370

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘ztp search value’ parameter to the ‘NetworkServlet’ endpoint. Successfu...

9.3CVSS9.2AI score0.0063EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.18 views

PT-2025-45179

Name of the Vulnerable Software and Affected Versions Hubbub Lite versions up to and including 1.36.0 Description The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output...

6.1CVSS5.9AI score0.00249EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.8 views

Advantech WebAccess/VPN 安全漏洞

Advantech WebAccess/VPN is a virtual private network feature integrated in Advantech WebAccess/SCADA software, designed to provide a secure and reliable network connectivity solution for industrial automation and remote monitoring systems. Advantech WebAccess/VPN suffers from a SQL injection...

6.5CVSS8.1AI score0.00291EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.10 views

Advantech WebAccess/VPN 安全漏洞

Advantech WebAccess/VPN is a virtual private network feature integrated in Advantech WebAccess/SCADA software, designed to provide a secure and reliable network connectivity solution for industrial automation and remote monitoring systems. Advantech WebAccess/VPN suffers from a SQL injection...

8.6CVSS8.1AI score0.00291EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.39 views

Advantech WebAccess/VPN 安全漏洞

Advantech WebAccess/VPN is a virtual private network feature integrated in Advantech WebAccess/SCADA software, designed to provide a secure and reliable network connectivity solution for industrial automation and remote monitoring systems. Advantech WebAccess/VPN suffers from a SQL injection...

6.5CVSS8.1AI score0.00291EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.5 views

Advantech WebAccess/VPN 安全漏洞

Advantech WebAccess/VPN is a virtual private network feature integrated in Advantech WebAccess/SCADA software, designed to provide a secure and reliable network connectivity solution for industrial automation and remote monitoring systems. Advantech WebAccess/VPN suffers from a SQL injection...

6.5CVSS8.1AI score0.00291EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.7 views

WordPress plugin Search & Go 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

9.8CVSS6.9AI score0.00397EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.11 views

PT-2025-45319

Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through = 2.7...

9.8CVSS7AI score0.00397EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.7 views

PT-2025-45358

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/VPN versions prior to 1.1.5 Description The software contains a SQL injection issue in the AjaxDeviceController.ajaxDeviceAction function. An authenticated, low-privileged user can inject SQL code through datatable search...

5.3CVSS7.8AI score0.00291EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.13 views

PT-2025-45201

Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.This issue affects Ajax Search Lite: from n/a through = 4.13.3...

7AI score0.00236EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.7 views

Advantech WebAccess/VPN 安全漏洞

Advantech WebAccess/VPN is a virtual private network feature integrated in Advantech WebAccess/SCADA software, designed to provide a secure and reliable network connectivity solution for industrial automation and remote monitoring systems. Advantech WebAccess/VPN suffers from a SQL injection...

6.5CVSS8.1AI score0.00291EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.8 views

PT-2025-45362

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/VPN versions prior to 1.1.5 Description The software contains a SQL injection issue in the AjaxStandaloneVpnClientsController.ajaxAction function. An authenticated, low-privileged user can inject SQL code through datatable...

5.3CVSS7.8AI score0.00291EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.14 views

PT-2025-45361

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/VPN versions prior to 1.1.5 Description The software contains a SQL injection issue in the AjaxFwRulesController.ajaxDeviceFwRulesAction function. An authenticated, low-privileged user can inject SQL code through datatable...

5.3CVSS7.8AI score0.00291EPSS
SaveExploits0References5
Rows per page
Query Builder