Lucene search
+L

30473 matches found

Vulnrichment
Vulnrichment
added 2026/03/22 11:24 p.m.5 views

CVE-2026-2580 WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter

The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 4.9.1 due to insufficient escaping on the user supplied parameter and lack of...

7.5CVSS5.9AI score0.00444EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/22 11:24 p.m.3 views

CVE-2026-2580

The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 4.9.1 due to insufficient escaping on the user supplied parameter and lack of...

7.5CVSS5.9AI score0.00444EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/03/22 11:24 p.m.40 views

CVE-2026-2580 WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter

The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 4.9.1 due to insufficient escaping on the user supplied parameter and lack of...

7.5CVSS0.00444EPSS
SaveExploits0References4
CVE
CVE
added 2026/03/22 11:24 p.m.25 views

CVE-2026-2580

The CVE-2026-2580 entry concerns the WP Maps – Store Locator, Google Maps, OpenStreetMap, Mapbox, Listing, Directory & Filters WordPress plugin (up to v4.9.1). The root cause is insufficient escaping and insufficient preparation of an SQL query, enabling time-based SQL Injection via the ‘orderby’...

7.5CVSS5.9AI score0.00444EPSS
SaveExploits0References4
Circl
Circl
added 2026/03/22 4:01 a.m.15 views

CVE-2026-4450

creationtimestamp| type| source ---|---|--- 2026-03-22 04:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmnx6b7fh2s 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260324...

8.8CVSS5.7AI score0.00281EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/22 3:30 a.m.11 views

EUVD-2026-14269

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2CVSS5.8AI score0.00135EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/22 3:16 a.m.7 views

DEBIAN-CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS5.3AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/22 3:16 a.m.11 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS0.00135EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/22 3:16 a.m.9 views

UBUNTU-CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS5.8AI score0.00135EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/03/22 3:16 a.m.21 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS5.9AI score0.00135EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/22 2:16 a.m.3 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2CVSS5.8AI score0.00135EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/03/22 2:16 a.m.42 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2CVSS0.00135EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/22 2:16 a.m.4 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/03/22 2:16 a.m.13 views

CVE-2026-33550

SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length only 12 digits instead of the 20 recommended...

2.6CVSS5.3AI score0.00135EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/03/22 12:00 a.m.27 views

SOGo 安全漏洞

SOGo is a highly fast and scalable modern collaboration suite open source by Alinto. It offers calendar management, address book management, a fully functional webmail client, as well as features for resource sharing and permission handling. Versions of SOGo prior to 5.12.5 contained security...

2.6CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/22 12:00 a.m.19 views

PT-2026-26962

Name of the Vulnerable Software and Affected Versions SOGo versions prior to 5.12.5 Description SOGo does not properly renew One-Time Passwords OTPs when a user disables and re-enables them. Additionally, the generated OTPs have a length of only 12 digits, which is shorter than the recommended 20...

2.6CVSS6AI score0.00135EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2026/03/22 12:00 a.m.10 views

PT-2026-27034

Name of the Vulnerable Software and Affected Versions WP Maps – Store Locator, Google Maps, OpenStreetMap, Mapbox, Listing, Directory & Filters plugin for WordPress versions up to and including 4.9.1 Description The WP Maps plugin for WordPress is susceptible to time-based SQL Injection. This is...

7.5CVSS5.8AI score0.00444EPSS
SaveExploits0References7
Circl
Circl
added 2026/03/21 8:01 p.m.21 views

CVE-2026-1800

creationtimestamp| type| source ---|---|--- 2026-03-21 20:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlt3xhcei26...

7.5CVSS5.8AI score0.00384EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/21 2:34 p.m.13 views

Malicious code in nump (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 daf533091c2cd6d2ae82e47f2ba9264b23395105f9c088018560c13cea33801f Package is a typosquatting or dependency confusion attempt with a low-harm local-only action, like leaving a flag file. --- Category: PROBABLYPENTEST - Package...

6AI score
SaveExploits0References1
Circl
Circl
added 2026/03/21 11:53 a.m.11 views

CVE-2026-4511

creationtimestamp| type| source ---|---|--- 2026-03-21 11:53:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhkxu7klvb2u...

6.5CVSS6.6AI score0.00232EPSS
SaveExploits0References1
Rows per page
Query Builder