Lucene search
K

7 matches found

EUVD
EUVD
added 2026/03/24 12:30 a.m.3 views

EUVD-2026-14620

The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

7.5CVSS5.9AI score0.0004EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/02/07 12:0 a.m.3 views

Nsasoft SpotFTP 安全漏洞

Nsasoft SpotFTP is an FTP client password recovery tool developed by the US company Nsasoft. Version 2.4.8 of Nsasoft SpotFTP contains a security vulnerability; this vulnerability stems from a large buffer overflow, which could potentially cause the application to crash...

7.5CVSS5.9AI score0.0002EPSS
Exploits0References5
OSV
OSV
added 2026/02/04 7:42 p.m.3 views

GHSA-8398-GMMX-564H n8n has a Python sandbox escape

Impact A vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. Only authenticated users are able to execute code through Task Runners. This issue affected any deployment in which the...

9.9CVSS6.4AI score0.00075EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/26 12:0 a.m.2 views

WordPress plugin wpForo Forum SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...

7.5CVSS7.5AI score0.00069EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/09/13 6:39 a.m.3 views

WordPress AI Engine plugin < 2.4.8 - Admin+ SQLi vulnerability

Admin+ SQLi vulnerability discovered by Karolis Narvilas in WordPress Plugin AI Engine versions 2.4.8...

4.7CVSS7AI score0.00214EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/09/28 12:0 a.m.2 views

Rdiffweb 安全漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. An information disclosure vulnerability exists in Rdiffweb versions prior to 2.4.8, which stems from the use of a cache containing...

4.6CVSS6AI score0.00254EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/26 12:0 a.m.1 views

PT-2022-21604 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.8 Description: The issue concerns the allocation of resources without limits or throttling, which can lead to a denial-of-service DOS attack or memory corruption. Specifically, there is no limit on the length of...

8.7CVSS5.4AI score0.00334EPSS
Exploits1References8
Rows per page
Query Builder