Lucene search
+L

864 matches found

Patchstack
Patchstack
added 2025/08/27 4:14 p.m.10 views

WordPress Neresa Theme <= 1.3 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Neresa versions = 1.3...

8.1CVSS7AI score0.00421EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-36179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fusiondirectory 1.3 suffers from Improper Session Handling. CVE-2022-36179 Note that Nessus relies on the presence of the package as reported by the vendor...

9.8CVSS8.2AI score0.00932EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/22 8:31 a.m.15 views

CVE-2025-49426

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dahz Kitring kitring allows PHP Local File Inclusion.This issue affects Kitring: from n/a through = 2.8...

8.1CVSS5.9AI score0.00535EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 5:15 p.m.11 views

CVE-2024-50640

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

9.8CVSS0.00523EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.15 views

CVE-2025-49428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dourou Cookie Warning allows Stored XSS. This issue affects Cookie Warning: from n/a through 1.3...

7.5CVSS0.00352EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.19 views

CVE-2025-49412

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in numixtech Page Transition page-transition allows Stored XSS.This issue affects Page Transition: from n/a through = 1.3...

5.9CVSS0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:03 a.m.9 views

CVE-2025-49412 WordPress Page Transition plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in numixtech Page Transition page-transition allows Stored XSS.This issue affects Page Transition: from n/a through = 1.3...

5.9CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 8:03 a.m.32 views

CVE-2025-49412 WordPress Page Transition plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in numixtech Page Transition page-transition allows Stored XSS.This issue affects Page Transition: from n/a through = 1.3...

5.9CVSS0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 8:03 a.m.38 views

CVE-2025-49428

CVE-2025-49428 (Cookie Warning) affects WordPress Cookie Warning plugin

7.5CVSS5.2AI score0.00352EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 8:03 a.m.19 views

CVE-2025-49426

CVE-2025-49426 affects the WordPress theme Kitring (

8.1CVSS5.9AI score0.00535EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:03 a.m.8 views

CVE-2025-49426 WordPress Kitring Theme <= 2.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dahz Kitring kitring allows PHP Local File Inclusion.This issue affects Kitring: from n/a through = 2.8...

8.1CVSS5.3AI score0.00535EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 8:03 a.m.20 views

CVE-2025-49428 WordPress Cookie Warning plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dourou Cookie Warning allows Stored XSS. This issue affects Cookie Warning: from n/a through 1.3...

7.5CVSS0.00352EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.8 views

Jeewx-Boot 安全漏洞

Jeewx-Boot is an official JEECG open source open source microsoft housekeeping platform. A security vulnerability exists in Jeewx-Boot version 1.3, which stems from an authentication bypass vulnerability in the preHandle function...

9.8CVSS7AI score0.00523EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.20 views

PT-2025-33953 · Unknown · Dourou Cookie Warning

Name of the Vulnerable Software and Affected Versions: Dourou Cookie Warning versions through 1.3 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update Dourou Cookie Warning to a version later than 1.3...

5.9CVSS5.7AI score0.00352EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/20 12:00 a.m.17 views

CVE-2024-50640

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

0.00523EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.10 views

WordPress plugin Page Transition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.9CVSS5.7AI score0.00239EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/20 12:00 a.m.23 views

CVE-2024-50640

CVE-2024-50640 affects jeewx-boot 1.3, with an authentication bypass in the preHandle function. Root cause: bypasses authentication logic in preHandle. CVSSv3.1 base score 9.8 (CRITICAL) - Network attack, no user interaction, high confidentiality/integrity/availability impact. No patch/fix versio...

9.8CVSS7.5AI score0.00523EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.16 views

PT-2025-34114 · Unknown · Jeewx-Boot

Name of the Vulnerable Software and Affected Versions: jeewx-boot version 1.3 Description: jeewx-boot version 1.3 contains an authentication bypass vulnerability in the preHandle function. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

9.8CVSS6.5AI score0.00523EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.14 views

WordPress和WordPress plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.5CVSS5.7AI score0.00352EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-3139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopylocateudev in tcmurcmdhandler.c lacks a check for transport-layer restrictions, allowing...

8.1CVSS7.3AI score0.02649EPSS
SaveExploits0References2
Rows per page
Query Builder