Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-13386

Malware in sbrugna...

9.8CVSS9.4AI score0.57706EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-16271

Malware in sbrugna...

9.8CVSS9.5AI score0.01155EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-7684

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00209EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-6158

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00121EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-7546

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00129EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 12:40 a.m.5 views

CVE-2022-40849

ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting XSS. An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's...

5.4CVSS5.7AI score0.00209EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:5 p.m.5 views

CVE-2020-20601

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...

9.8CVSS7.8AI score0.57706EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 8:50 a.m.6 views

CVE-2019-7580

ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admincategory/addpost.html alias parameter because the mishandling of a single quote character allows data/conf/route.php injection...

8.8CVSS7.9AI score0.54985EPSS
Exploits3References1
OSV
OSV
added 2024/04/25 8:15 p.m.3 views

CVE-2024-31615

ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php...

9.8CVSS6.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/12/01 12:0 a.m.5 views

CVE-2022-40849

ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting XSS. An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's...

5.8AI score0.00209EPSS
Exploits1References1
Rows per page
Query Builder