Lucene search
+L

559 matches found

CNNVD
CNNVD
added 2024/11/26 12:00 a.m.14 views

Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞

The Advantech EKI-6333AC-2G and Advantech EKI-6333AC-2GD are both industrial-grade wireless access points APs from Advantech, China. A security vulnerability exists in the Advantech EKI-6333AC-2G version 1.6.3 and earlier, EKI-6333AC-2GD version v1.6.3 and earlier, and EKI-6333AC-1GPO version...

7.2CVSS6.7AI score0.01072EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/21 12:00 a.m.13 views

SFTPGo 输入验证错误漏洞

SFTPGo is a full-featured and highly configurable SFTP server from the individual developer Nicola Murino in Italy. An input validation error vulnerability exists in SFTPGo versions prior to 2.4.0 through 2.6.3, which stems from the ability of an administrator to access the underlying operating...

5.1CVSS6.4AI score0.0063EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/20 12:00 a.m.11 views

Vegam 4i 安全漏洞

Vegam 4i is an IoT data tool from Vegam. A security vulnerability exists in Vegam 4i v.6.3.47.0 and prior versions, which stems from a vulnerability that could allow a remote attacker to gain access to sensitive information via the Print Label feature...

7.5CVSS6.7AI score0.00517EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/14 12:00 a.m.14 views

DInGO dLibra 跨站脚本漏洞

DInGO dLibra is a digital library system from DInGO, Inc. A cross-site scripting vulnerability exists in DInGO dLibra versions 6.0 through prior to 6.3.20, which stems from the presence of Reflective Cross-Site Scripting XSS, where an attacker may be able to use a crafted URL to cause the script ...

5.3CVSS5.3AI score0.01091EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.31 views

WordPress plugin Advanced Custom Fields PRO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.7AI score0.00305EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.11 views

WordPress plugin Advanced Custom Fields PRO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.7AI score0.00315EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.10 views

WordPress plugin Namaste! LMS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.8CVSS7AI score0.00504EPSS
SaveExploits0References2
Circl
Circl
added 2024/10/27 12:01 a.m.10 views

CVE-2020-26303

creationtimestamp| type| source ---|---|--- 2024-10-27 00:01:00+00:00| seen| https://t.me/cvedetector/9039 2026-07-11 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqf3vuyrpc2m...

8.7CVSS7AI score0.00539EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.9 views

Monica 安全漏洞

Monica is an AI assistant from Monica. A security vulnerability exists in Monica version v6.3.0, which stems from an instant injection vulnerability in the chat box that allows an attacker to access and steal all previous and subsequent chat data between a user and the AI assistant via a spoofed...

7.5CVSS7.1AI score0.00419EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/10/16 3:57 a.m.12 views

WordPress Zita Elementor Site Library plugin <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Zita Elementor Site Library versions = 1.6.3...

6.4CVSS5.7AI score0.00377EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/13 11:09 a.m.7 views

WordPress ShortPixel Image Optimizer plugin <= 5.6.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin ShortPixel Image Optimizer versions = 5.6.3...

7.6CVSS8.1AI score0.00447EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/30 12:00 a.m.11 views

PT-2024-28661 · Ibm · Ibm Sterling Connect:Direct Web Services

Name of the Vulnerable Software and Affected Versions: IBM Sterling Connect:Direct Web Services versions 6.0 through 6.3 Description: The issue concerns the use of default credentials for potentially critical functionality in IBM Sterling Connect:Direct Web Services. This could pose a significant...

9.8CVSS6.9AI score0.00764EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2024/08/28 12:00 a.m.11 views

NetIQ Advanced Authentication 安全漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A security vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1 that stems from an insufficien...

8.8CVSS6.5AI score0.00183EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/20 12:00 a.m.10 views

Spring Security 安全漏洞

VMware Spring Security is a set of security frameworks from VMware that provide illustrative security for Spring-based applications. A security vulnerability exists in Spring Security versions 6.3.0 and 6.3.1, which stems from a lack of authorization when using @AuthorizeReturnObject, and allows ...

7.5CVSS6.4AI score0.00458EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/08/18 12:00 a.m.13 views

PT-2024-38673 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.3.0 Description: A critical vulnerability was found in DedeBIZ, affecting an unknown functionality of the file admin/media add.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to...

8.8CVSS6.6AI score0.00722EPSS
SaveExploits1References16
CNNVD
CNNVD
added 2024/08/18 12:00 a.m.11 views

DedeBIZ 代码问题漏洞

DedeBIZ is a content management system from China Muyun Intelligence DedeBIZ company. A code issue vulnerability exists in DedeBIZ version 6.3.0, which stems from the parameter litpic in the file admin/archivesdo.php that can lead to unrestricted uploads...

7.2CVSS6.6AI score0.0066EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/07/31 12:00 a.m.6 views

PT-2024-28632 · Microsoft +1 · Asp.Net Core +1

Name of the Vulnerable Software and Affected Versions: Duende IdentityServer versions 5.1 and earlier Duende IdentityServer versions 6.0 through 6.0.4 Duende IdentityServer versions 6.1 through 6.1.7 Duende IdentityServer versions 6.2 through 6.2.4 Duende IdentityServer versions 6.3 through 6.3.9...

5.1CVSS7AI score0.00534EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2024/07/09 12:00 a.m.13 views

PT-2024-25283 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.3 through 7.2.1 FortiWeb version 7.0 Description: An improper certificate validation issue may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication...

4.8CVSS7.4AI score0.00189EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/07/09 12:00 a.m.11 views

Silverpeas Security Vulnerabilities

Silverpeas is a suite of open source business collaboration platforms from Silverpeas Open Source. The platform includes applications for project management, blogs, forums, and document management. A security vulnerability exists in Silverpeas version 6.3.5 and earlier versions that stems from...

5.4CVSS6AI score0.00767EPSS
SaveExploits2References3
VulnCheck KEV
VulnCheck KEV
added 2024/07/05 12:00 a.m.6 views

VulnCheck KEV: CVE-2024-37502

Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.This issue affects WooCommerce Social Login: from n/a through = 2.6.3...

7.5CVSS5.8AI score0.0031EPSS
SaveExploits0References1
Rows per page
Query Builder