Lucene search
K

8 matches found

CNNVD
CNNVD
added 2025/12/10 12:0 a.m.2 views

WBCE CMS SQL注入漏洞

WBCE CMS is WBCE CMS open source a set of open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in WBCE CMS 1.6.4 and earlier versions, which stems from improper handling of the groups parameter and can lead to SQL injection attacks...

9.4CVSS7.7AI score0.00076EPSS
Exploits3References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-26048

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00026EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/22 12:0 a.m.2 views

FORT Validator 安全漏洞

FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions 1.6.3 and 1.6.4, which stems from the presence of an integer underflow issue...

7.5CVSS6.5AI score0.00392EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/30 12:0 a.m.2 views

PT-2024-35847 · Unknown · Cool Plugins Cryptocurrency Widgets For Elementor

Name of the Vulnerable Software and Affected Versions: Cool Plugins Cryptocurrency Widgets For Elementor versions 1.6.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which...

9.8CVSS8.2AI score0.00956EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/08/18 12:0 a.m.3 views

PT-2024-30509 · Elementor · Ultimate Store Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: Ultimate Store Kit Elementor Addons versions 1.6.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that ...

6.5CVSS6.3AI score0.00143EPSS
Exploits0References9
CNNVD
CNNVD
added 2022/10/13 12:0 a.m.3 views

Ree6 SQL注入漏洞

Ree6 is a Ree6 open source all-in-one Discord Bot maintained by Presti. Ree6 1.6.4 and earlier versions suffer from a SQL injection vulnerability that can be exploited by attackers to manipulate SQL queries...

9.8CVSS8.5AI score0.00334EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2021/04/22 4:48 p.m.35 views

CVE-2021-27400

HashiCorp Vault and Vault Enterprise Cassandra integrations storage backend and database secrets engine plugin did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1...

7.5CVSS7.5AI score0.00138EPSS
Exploits0
OSV
OSV
added 2020/05/27 4:15 p.m.11 views

CVE-2020-13627

Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...

6.1CVSS6AI score0.00088EPSS
Exploits2References1
Rows per page
Query Builder