Lucene search
+L

7 matches found

CVE
CVE
added 2026/07/17 12:0 a.m.14 views

CVE-2026-52203

CVE-2026-52203 concerns MCMS 6.1.1 where a remote attacker can obtain sensitive information via the source parameter. The available documents consistently identify MCMS v6.1.1 as affected and describe information disclosure as the outcome. CVSS metrics (from the initial entry) indicate a Network ...

7.5CVSS5.4AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/31 2:22 p.m.32 views

CVE-2026-1165

CVE-2026-1165 affects Popup Box for WordPress up to version 6.1.1. The vulnerability is a Cross-Site Request Forgery due to a flawed nonce implementation in publish_unpublish_popupbox that validates a self-created nonce instead of the request nonce, enabling unauthenticated attackers to change po...

4.3CVSS5.8AI score0.00165EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/05 10:58 p.m.7 views

EUVD-2025-206236

vega-functions vulnerable to Cross-site Scripting via setdata function...

7.2CVSS6AI score0.00184EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/05 9:33 p.m.2 views

CVE-2025-66648 `vega-functions` vulnerable to Cross-site Scripting via `setdata` function

vega-functions provides function implementations for the Vega expression language. Prior to version 6.1.1, for sites that allow users to supply untrusted user input, malicious use of an internal function not part of the public API could be used to run unintentional javascript XSS. This issue is...

7.2CVSS6.3AI score0.00184EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.12 views

PT-2025-46987

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A flaw exists in the Application Server of Desktop Alert PingAlert that can lead to the disclosure of technical information via stack traces. Recommendations Update to a...

4.3CVSS6.2AI score0.00217EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/28 12:0 a.m.6 views

DTEX DEC-M 安全漏洞

DTEX DEC-M is a unified internal risk management platform from DTEX Corporation. A security vulnerability exists in DTEX DEC-M version 6.1.1, which stems from a lack of proper logical validation, and allows an attacker to elevate privileges to root via an unauthorized client connection using the...

8.8CVSS6.7AI score0.00979EPSS
SaveExploits1References2
CNVD
CNVD
added 2017/09/07 12:0 a.m.8 views

Unspecified Vulnerability in Oracle Payment Interface Component

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle. The solution provides human resource cost management, provides tracking and management of services throughout the customer's journey to improve customer...

5.3CVSS6.6AI score0.01476EPSS
SaveExploits0References1
Rows per page
Query Builder