Lucene search
K

7 matches found

Vulnrichment
Vulnrichment
added 2026/05/12 10:35 p.m.9 views

CVE-2026-41901 Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions

Thymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1.5.RELEASE, a security bypass vulnerability exists in the expression execution mechanisms of Thymeleaf. Although the library provides mechanisms to avoid the execution of potentially dangerous...

9CVSS5.9AI score0.00328EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.3 views

PT-2026-24349

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. A stack overflow exists in the CIccBasicStructFactory::CreateStruct function, leading to uncontrolled recursion...

5.5CVSS5.8AI score0.00176EPSS
Exploits0References10
CVE
CVE
added 2025/12/09 2:52 p.m.5 views

CVE-2025-62153

CVE-2025-62153 concerns WordPress plugin “Quick Interest Slider” (versions up to 3.1.7) with a Missing Authorization / Broken Access Control flaw. Public descriptions from NVD/Red Hat/ENISA (and CVE enrichment) indicate an improper access-control configuration that could allow an attacker to expl...

5.3CVSS5.7AI score0.00214EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:6 a.m.10 views

CVE-2015-9357

The akismet plugin before 3.1.5 for WordPress has XSS...

6.1CVSS7.1AI score0.00963EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.3 views

WordPress plugin Ditty 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.8CVSS4.8AI score0.00266EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2021/12/17 8:41 p.m.1 views

com.github.lburgazzoli:atomix-boot (>=1.0.1 <=1.0.2), com.github.lburgazzoli:atomix-boot-examples (>=1.0.1 <=1.0.2) +123 more potentially affected by CVE-2020-35214 via io.atomix:atomix (>=0.1.0-beta1 <=3.1.5)

io.atomix:atomix MAVEN version =0.1.0-beta1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =3.0.0, =1.2.3-1, =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.2.12, =0.3.5 and more Source cves: CVE-2020-35214 Source advisory: OSV:GHSA-M4H3-7MC2-V295...

8.1CVSS7.2AI score0.00798EPSS
Exploits0
CNVD
CNVD
added 2017/05/16 12:0 a.m.3 views

Think Mutual Bank Mobile Banking app SSL Certificate Validation Vulnerability

Think Mutual Bank mobile banking app for iOS is a mobile banking app for iOS from Think Mutual Bank that provides quick access to manage customer accounts, manage balances, pay bills, send money, deposit checks, set up text alerts, find branch and ATM locations and more. A security vulnerability...

5.9CVSS6.5AI score0.00864EPSS
Exploits0References1
Rows per page
Query Builder