Lucene search
+L

15651 matches found

Vulnrichment
Vulnrichment
•added 2025/08/27 12:00 a.m.•4 views

CVE-2025-51667

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

8.2AI score0.00268EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•8 views

CVE-2025-58197: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Stored XSS.This issue affects Simple Download Monitor: from n/a through = 3.9.34...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/27 12:00 a.m.•29 views

CVE-2025-51667

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

0.00268EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•7 views

CVE-2025-51667: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

7CVSS8.4AI score0.00268EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•5 views

CVE-2025-58202: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...

4.3CVSS5.8AI score0.00128EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2018-7711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an...

8.1CVSS7.5AI score0.01189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2019-14250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simpleobjectelfmatch in simple-object-elf.c does not check for a zero shstrndx...

5.5CVSS7AI score0.02306EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2017-16248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the...

7.5CVSS7.2AI score0.02434EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/24 12:34 p.m.•15 views

CVE-2025-57892

Cross-Site Request Forgery CSRF vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through = 20250322...

4.3CVSS5.9AI score0.00128EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2018-12356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verification routine parses the output of GnuPG...

9.8CVSS9AI score0.04427EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2025-39930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e...

8.4CVSS6.2AI score0.00257EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2019-12221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is a SEGV in t...

6.5CVSS6.6AI score0.0196EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2025/08/22 4:02 p.m.•11 views

CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

7.8CVSS6.2AI score0.00146EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2025/08/22 12:15 p.m.•12 views

CVE-2025-57892

Cross-Site Request Forgery CSRF vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through = 20250322...

4.3CVSS0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/22 11:59 a.m.•21 views

CVE-2025-57892 WordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through = 20250322...

4.3CVSS0.00128EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/22 11:59 a.m.•5 views

CVE-2025-57892 WordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jeff Starr Simple Statistics for Feeds allows Cross Site Request Forgery. This issue affects Simple Statistics for Feeds: from n/a through 20250322...

4.3CVSS5.8AI score0.00128EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/22 11:59 a.m.•24 views

CVE-2025-57892

CVE-2025-57892 is a CSRF vulnerability in WordPress plugin Simple Statistics for Feeds (versions up to 20250322). The CVE details show a CSRF risk without published in-the-wild exploits in the provided documents, with a CVSS v3.1 base score of 4.3 (Medium) and impact limited to integrity/availabi...

4.3CVSS5.8AI score0.00128EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/22 8:31 a.m.•15 views

CVE-2025-49438

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3...

8.1CVSS5.8AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/22 8:31 a.m.•21 views

CVE-2025-54021

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mitchell Bennis Simple File List simple-file-list allows Path Traversal.This issue affects Simple File List: from n/a through = 6.1.14...

7.5CVSS5.9AI score0.00415EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/22 8:31 a.m.•22 views

CVE-2025-48162

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Reflected XSS.This issue affects Simple Business Directory Pro: from n/a through = 15.5.1...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
Rows per page
Query Builder