排序
CVE-2022-1713: Drawio <18.0.4 - Server-Side Request Forgery
漏洞标题 CVE-2022-1713: Drawio <18.0.4 - Server-Side Request Forgery 漏洞描述 Drawio prior to 18.0.4 is vulnerable to server-side request forgery. An attacker can make a request...
2022年6月1日 16:21CVE-2022-47945: Thinkphp Lang – Local File Inclusion
漏洞标题 CVE-2022-47945: Thinkphp Lang - Local File Inclusion 漏洞描述 ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack fe...
2022年5月23日 15:37CVE-2023-44352: Adobe Coldfusion – Cross-Site Scripting
漏洞标题 CVE-2023-44352: Adobe Coldfusion - Cross-Site Scripting 漏洞描述 Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross...
2023年7月20日 13:32CVE-2022-0150: WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting
漏洞标题 CVE-2022-0150: WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting 漏洞描述 WordPress Accessibility Helper plugin before 0.6.0.7 contains a cross-site script...
2022年10月27日 11:17CVE-2017-18490: Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting
漏洞标题 CVE-2017-18490: Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting 漏洞描述 The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issu...
2017年6月10日 11:26CVE-2021-3017: Intelbras WIN 300/WRN 342 – Credentials Disclosure
漏洞标题 CVE-2021-3017: Intelbras WIN 300/WRN 342 - Credentials Disclosure 漏洞描述 Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover cre...
2021年6月14日 18:21CVE-2021-24910: WordPress Transposh Translation <1.0.8 - Cross-Site Scripting
漏洞标题 CVE-2021-24910: WordPress Transposh Translation <1.0.8 - Cross-Site Scripting 漏洞描述 WordPress Transposh Translation plugin before 1.0.8 contains a reflected cross-si...
2021年6月17日 21:08CVE-2021-24364: WordPress Jannah Theme <5.4.4 - Cross-Site Scripting
漏洞标题 CVE-2021-24364: WordPress Jannah Theme <5.4.4 - Cross-Site Scripting 漏洞描述 WordPress Jannah theme before 5.4.4 contains a reflected cross-site scripting vulnerabilit...
2021年8月9日 15:23CVE-2023-6018: Mlflow – Arbitrary File Write
漏洞标题 CVE-2023-6018: Mlflow - Arbitrary File Write 漏洞描述 An attacker can overwrite any file on the server hosting MLflow without any authentication. PoC代码
2023年1月28日 18:48CVE-2023-4568: PaperCut NG Unauthenticated XMLRPC Functionality
漏洞标题 CVE-2023-4568: PaperCut NG Unauthenticated XMLRPC Functionality 漏洞描述 PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and ...
2023年3月12日 14:38CVE-2023-50094: reNgine 2.2.0 – Command Injection
漏洞标题 CVE-2023-50094: reNgine 2.2.0 - Command Injection 漏洞描述 reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell...
2023年8月24日 21:50CVE-2023-3380: WAVLINK WN579X3 – Remote Command Execution
漏洞标题 CVE-2023-3380: WAVLINK WN579X3 - Remote Command Execution 漏洞描述 Remote Command Execution vulnerability in WAVLINK WN579X3 routers via pingIp parameter in /cgi-bin/adm.c...
2023年4月25日 12:53CVE-2023-42793: JetBrains TeamCity < 2023.05.4 - Remote Code Execution
漏洞标题 CVE-2023-42793: JetBrains TeamCity < 2023.05.4 - Remote Code Execution 漏洞描述 In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity ...
2023年11月3日 15:33CVE-2024-5936: PrivateGPT < 0.5.0 - Open Redirect
漏洞标题 CVE-2024-5936: PrivateGPT < 0.5.0 - Open Redirect 漏洞描述 An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the &...
2024年4月14日 09:04CVE-2023-27637: PrestaShop `tshirtecommerce` Module – SQL Injection
漏洞标题 CVE-2023-27637: PrestaShop `tshirtecommerce` Module - SQL Injection 漏洞描述 The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via t...
2023年10月22日 10:11CVE-2024-3032: WordPress Themify Builder < 7.5.8 - Open Redirect
漏洞标题 CVE-2024-3032: WordPress Themify Builder < 7.5.8 - Open Redirect 漏洞描述 The Themify Builder WordPress plugin before version 7.5.8 contains an open redirect vulnerabil...
2024年4月2日 14:39
