Lucene search
K

9 matches found

CVE
CVE
added 2025/06/20 3:4 p.m.14 views

CVE-2025-49983

WPThumb for WordPress is affected by CVE-2025-49983: a Server-Side Request Forgery (SSRF) vulnerability in WPThumb versions 0.10 and earlier. The vulnerability causes SSRF, with a CVSS v3.1 base score of 4.9 (Medium) and network access requiring low privileges with no user interaction. Exploitati...

4.9CVSS5.9AI score0.0012EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/10 5:48 p.m.3 views

CVE-2025-36576

Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery CSRF vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

2.7CVSS3.9AI score0.00132EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:27 a.m.5 views

CVE-2022-47873

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

9.8CVSS6.9AI score0.00296EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/01/24 5:24 p.m.3 views

CVE-2025-24701 WordPress Chained Quiz Plugin <= 1.3.2.9 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Kiboko Labs Chained Quiz allows Server Side Request Forgery. This issue affects Chained Quiz: from n/a through 1.3.2.9...

4.4CVSS5.8AI score0.00206EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/15 3:23 p.m.17 views

CVE-2025-22346 WordPress Course Migration for LearnDash plugin 1.0.2 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Faizaan Gagan Course Migration for LearnDash allows Server Side Request Forgery.This issue affects Course Migration for LearnDash: from 1.0.2 through n/a...

6.4CVSS0.00253EPSS
Exploits0References1
CVE
CVE
added 2025/01/15 3:23 p.m.58 views

CVE-2025-22346

CVE-2025-22346: WordPress Course Migration for LearnDash plugin (versions 1.0.2 through n/a) suffers Server-Side Request Forgery (SSRF). The vulnerability is authenticated (Subscriber+) and is documented in multiple feeds (NVD/RedHat/CVELIST). The CVSS v3.1 base score is 6.4 (Network, Low/Low/No ...

6.4CVSS8.6AI score0.00253EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/01/31 12:0 a.m.6 views

CVE-2022-47873

Netcad KEOS 1.0 is vulnerable to XML External Entity XXE resulting in SSRF with XXE remote...

9.5AI score0.00296EPSS
Exploits0References1
OSV
OSV
added 2016/05/11 11:51 a.m.10 views

SUSE-SU-2016:1275-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled. They can be re-enabled by exporting the following environment variable...

10CVSS6.8AI score0.93622EPSS
Exploits13References7
OSV
OSV
added 2016/05/11 11:49 a.m.8 views

SUSE-SU-2016:1276-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - Security update Remote Code Execution / Local File read bsc978061 CVE-2016-3714, CVE-2016-3715, CVE-2016-3717, CVE-2016-3718 - CVE-2016-3714: Insufficient shell characters filtering leads to potentially remote code execution -...

10CVSS7.2AI score0.93622EPSS
Exploits12References6
Rows per page
Query Builder