Lucene search
+L

2695 matches found

CNNVD
CNNVD
added 2025/12/23 12:0 a.m.5 views

WordPress plugin Beaver Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.3AI score0.00357EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/20 12:0 a.m.4 views

WordPress plugin Pretty Google Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.3AI score0.0024EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/12/19 11:40 a.m.12 views

Security update for mariadb

This update for mariadb fixes the following issues: Update to version 10.5.29. Release notes and changelog: https://mariadb.com/kb/en/mariadb-10-5-29-release-notes/ https://mariadb.com/kb/en/mariadb-10-5-29-changelog/ https://mariadb.com/kb/en/mariadb-10-5-28-release-notes/...

8.5CVSS6.8AI score0.01258EPSS
SaveExploits0References24
CNNVD
CNNVD
added 2025/12/19 12:0 a.m.9 views

pretix 安全漏洞

pretix is a ticketing software that cares about your event all the way from pretix Germany. A security vulnerability exists in pretix that stems from multiple API endpoints that allow access to sensitive files via UUID, which could lead to unauthorized data access...

7CVSS6.4AI score0.00215EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/18 7:53 p.m.29 views

CVE-2021-47711 Kentico Xperience <= 13.0.52 Online Marketing Macros SQL Injection

A SQL injection vulnerability in Kentico Xperience allows authenticated editors to inject malicious SQL queries via online marketing macro method parameters. This enables unauthorized database access and potential data manipulation by exploiting macro method input validation weaknesses...

8.8CVSS0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.4 views

CVE-2025-64272 WordPress Email marketing for WordPress by GetResponse Official plugin <= 1.5.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Retrieve Embedded Sensitive Data.This issue affects Email marketing for WordPress by GetResponse Official: from...

6.5CVSS6.4AI score0.00281EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/18 12:0 a.m.7 views

Class and Exam Timetable Management /preview7.php File SQL Injection Vulnerability

Class and Exam Timetable Management is a course and exam timetable management system. Class and Exam Timetable Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter courseyearsection/semester in the file...

9.8CVSS8AI score0.00363EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.7 views

WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞

...

5.3CVSS5.8AI score0.00917EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.8 views

PT-2025-51474

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it...

4.3CVSS5.1AI score0.00238EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.6 views

WordPress plugin Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories 安全漏洞

...

4.3CVSS5.8AI score0.00238EPSS
SaveExploits0References2
NCSC
NCSC
added 2025/12/15 9:6 a.m.10 views

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3 and macOS Tahoe 26.2. The vulnerabilities covered a wide range of issues, including memory corruption, logging problems, and unauthorized access to sensitive user data. These vulnerabilities could be exploited by malicio...

9.8CVSS6.8AI score0.32483EPSS
SaveExploits16References3
RedhatCVE
RedhatCVE
added 2025/12/14 5:3 a.m.14 views

CVE-2025-14540

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userbackgetjson function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract...

4.3CVSS5.2AI score0.00212EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/13 4:16 p.m.8 views

CVE-2025-14540

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userbackgetjson function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract...

4.3CVSS0.00212EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.13 views

WordPress plugin Userback 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.3AI score0.00212EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.7 views

Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from an Insufficient Sandbox Restrictions vulnerability, which stems from an insufficient...

3.3CVSS6.4AI score0.00144EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.7 views

WordPress plugin Simple Bike Rental 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.2AI score0.00207EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.6 views

WordPress plugin Ultra Addons for Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security vulnerability exists in...

4.3CVSS6.3AI score0.00343EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.6 views

PT-2025-50618

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in...

6.5AI score0.00105EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/11 12:0 a.m.31 views

CVE-2025-55310

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in...

0.00105EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.4 views

CVE-2025-63058 WordPress Custom Field Template plugin <= 2.7.6 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki Miyashita Custom Field Template custom-field-template allows Retrieve Embedded Sensitive Data.This issue affects Custom Field Template: from n/a through = 2.7.6...

4.3CVSS5.2AI score0.00326EPSS
SaveExploits0References1
Rows per page
Query Builder