VulDB GitHub Commit Analyzer
507 kredili kayıt · son 12 ayda 12 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
24İzleyin | CVE-2023-5835İstismar yok | hu60t hu60wap6 ubbparser.php markdown cross site scriptinghu60 · hu60wap6 · CWE-79 | Orta6,1 | — | %0,4 | 28 Eki 2023 |
30İzleyin | CVE-2012-10016İstismar yok | Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosurehalulu · simple-download-button-shortcode · CWE-200 | Yüksek7,5 | — | %0,6 | 16 Eki 2023 |
39İzleyin | CVE-2011-10004İstismar yok | reciply Plugin uploadImage.php unrestricted uploadreciply project · reciply · CWE-434 | Kritik9,8 | — | %0,6 | 16 Eki 2023 |
21İzleyin | CVE-2023-5588İstismar yok | kphrx pleroma pack.ex Pleroma.Emoji.Pack path traversalkpherox · pleroma · CWE-22 | Orta5,3 | — | %0,6 | 15 Eki 2023 |
39İzleyin | CVE-2015-10126İstismar yok | Easy2Map Photos Plugin sql injectionsteven ellis · easy2map photos · CWE-89 | Kritik9,8 | — | %0,5 | 6 Eki 2023 |
35İzleyin | CVE-2015-10125İstismar yok | WP Ultimate CSV Importer Plugin cross-site request forgerysmackcoders · import all pages\, post types\, products\, orders\, and users as xml \& csv · CWE-352 | Yüksek8,8 | — | %0,4 | 5 Eki 2023 |
39İzleyin | CVE-2015-10124İstismar yok | Most Popular Posts Widget Plugin functions.php show_views sql injectionsmartfan · most popular posts widget · CWE-89 | Kritik9,8 | — | %0,6 | 2 Eki 2023 |
21İzleyin | CVE-2018-25089İstismar yok | glb Meetup Tag Extension Link Attribute reverse tabnabbingglb · meetup tag · CWE-1022 | Orta5,3 | — | %0,6 | 28 Ağu 2023 |
24İzleyin | CVE-2016-15035İstismar yok | Doc2k RE-Chat re_chat.js cross site scriptingdoc2k · re-chat · CWE-79 | Orta6,1 | — | %0,5 | 28 Ağu 2023 |
35İzleyin | CVE-2021-4428Kavram kanıtı | what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosurewhat3words · autosuggest · CWE-200 | Yüksek7,5 | — | %15,8 | 18 Tem 2023 |
40Planlayın | CVE-2020-36762Kavram kanıtı | ONS Digital RAS Collection Instrument comment.yml jobs os command injectionons · ras collection instrument · CWE-78 | Kritik9,8 | — | %2,3 | 18 Tem 2023 |
39İzleyin | CVE-2018-25088İstismar yok | Blue Yonder postgraas_server PostgreSQL Backend postgres_cluster_driver.py create_postgres_db sql injectionblueyonder · postgraas server · CWE-89 | Kritik9,8 | — | %0,7 | 18 Tem 2023 |
39İzleyin | CVE-2015-10122İstismar yok | wp-donate Plugin donate-display.php sql injectionwp donate project · wp donate · CWE-89 | Kritik9,8 | — | %1,1 | 18 Tem 2023 |
30İzleyin | CVE-2022-4952İstismar yok | OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumptiondotnetfoundation · c\# language server protocol · CWE-400 | Yüksek7,5 | — | %0,9 | 16 Tem 2023 |
39İzleyin | CVE-2016-15034İstismar yok | Dynacase Webdesk freedomrss_search.php freedomrss_search sql injectionanakeen · dynacase webdesk · CWE-89 | Kritik9,8 | — | %0,6 | 10 Tem 2023 |
24İzleyin | CVE-2015-10121İstismar yok | Beeliked Microsite Plugin beelikedmicrosite.php embed_handler cross site scriptingbeeliked · beeliked · CWE-79 | Orta6,1 | — | %0,5 | 10 Tem 2023 |
24İzleyin | CVE-2015-10120İstismar yok | WDS Multisite Aggregate Plugin WDS_Multisite_Aggregate_Options.php update_options cross site scriptingwebdevstudios · wds multisite aggregate · CWE-79 | Orta6,1 | — | %0,5 | 10 Tem 2023 |
24İzleyin | CVE-2015-10119İstismar yok | View All Posts Page Plugin view-all-posts-pages.php action_admin_notices_activation cross site scriptingoomphinc · view all post\'s pages · CWE-79 | Orta6,1 | — | %0,6 | 10 Tem 2023 |
24İzleyin | CVE-2015-10118İstismar yok | cchetanonline WP-CopyProtect wp-copyprotect.php CopyProtect_options_page cross site scriptingwp-copyprotect project · wp-copyprotect · CWE-79 | Orta6,1 | — | %0,5 | 12 Haz 2023 |
30İzleyin | CVE-2018-25087İstismar yok | Arborator Server project.cgi start denial of servicearborator server project · arborator server · CWE-404 | Yüksek7,5 | — | %0,9 | 5 Haz 2023 |
24İzleyin | CVE-2017-20185İstismar yok | Fuzzy SWMP GET Parameter swmp.php cross site scriptingserver web monitor page project · server web monitor page · CWE-79 | Orta6,1 | — | %0,5 | 5 Haz 2023 |
24İzleyin | CVE-2015-10117İstismar yok | Gravity Forms DPS PxPay Plugin cross site scriptingwebaware · gf windcave free · CWE-79 | Orta6,1 | — | %0,6 | 5 Haz 2023 |
35İzleyin | CVE-2015-10116İstismar yok | RealFaviconGenerator Favicon Plugin class-favicon-by-realfavicongenerator-admin.php install_new_favicon cross-site request forgeryrealfavicongenerator · favicon by realfavicongenerator · CWE-352 | Yüksek8,8 | — | %0,5 | 5 Haz 2023 |
30İzleyin | CVE-2013-10030İstismar yok | Exit Box Lite Plugin wordpress-exit-box-lite.php information disclosureangrybyte · wordpress exit box lite · CWE-200 | Yüksek7,5 | — | %0,7 | 5 Haz 2023 |
35İzleyin | CVE-2013-10029İstismar yok | Exit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgeryangrybte · wordpress exit box lite · CWE-352 | Yüksek8,8 | — | %0,4 | 5 Haz 2023 |
- CVE-2023-583524İzleyin
hu60t hu60wap6 ubbparser.php markdown cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0hu60 · hu60wap628 Eki 2023
- CVE-2012-1001630İzleyin
Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosure
YüksekCVSS 7,5İstismar yokEPSS %1halulu · simple-download-button-shortcode16 Eki 2023
- CVE-2011-1000439İzleyin
reciply Plugin uploadImage.php unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %1reciply project · reciply16 Eki 2023
- CVE-2023-558821İzleyin
kphrx pleroma pack.ex Pleroma.Emoji.Pack path traversal
OrtaCVSS 5,3İstismar yokEPSS %1kpherox · pleroma15 Eki 2023
- CVE-2015-1012639İzleyin
Easy2Map Photos Plugin sql injection
KritikCVSS 9,8İstismar yokEPSS %1steven ellis · easy2map photos6 Eki 2023
- CVE-2015-1012535İzleyin
WP Ultimate CSV Importer Plugin cross-site request forgery
YüksekCVSS 8,8İstismar yokEPSS %0smackcoders · import all pages\, post types\, products\, orders\, and users as xml \& csv5 Eki 2023
- CVE-2015-1012439İzleyin
Most Popular Posts Widget Plugin functions.php show_views sql injection
KritikCVSS 9,8İstismar yokEPSS %1smartfan · most popular posts widget2 Eki 2023
- CVE-2018-2508921İzleyin
glb Meetup Tag Extension Link Attribute reverse tabnabbing
OrtaCVSS 5,3İstismar yokEPSS %1glb · meetup tag28 Ağu 2023
- CVE-2016-1503524İzleyin
Doc2k RE-Chat re_chat.js cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0doc2k · re-chat28 Ağu 2023
- CVE-2021-442835İzleyin
what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosure
YüksekCVSS 7,5Kavram kanıtıEPSS %16what3words · autosuggest18 Tem 2023
- CVE-2020-3676240Planlayın
ONS Digital RAS Collection Instrument comment.yml jobs os command injection
KritikCVSS 9,8Kavram kanıtıEPSS %2ons · ras collection instrument18 Tem 2023
- CVE-2018-2508839İzleyin
Blue Yonder postgraas_server PostgreSQL Backend postgres_cluster_driver.py create_postgres_db sql injection
KritikCVSS 9,8İstismar yokEPSS %1blueyonder · postgraas server18 Tem 2023
- CVE-2015-1012239İzleyin
wp-donate Plugin donate-display.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1wp donate project · wp donate18 Tem 2023
- CVE-2022-495230İzleyin
OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumption
YüksekCVSS 7,5İstismar yokEPSS %1dotnetfoundation · c\# language server protocol16 Tem 2023
- CVE-2016-1503439İzleyin
Dynacase Webdesk freedomrss_search.php freedomrss_search sql injection
KritikCVSS 9,8İstismar yokEPSS %1anakeen · dynacase webdesk10 Tem 2023
- CVE-2015-1012124İzleyin
Beeliked Microsite Plugin beelikedmicrosite.php embed_handler cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1beeliked · beeliked10 Tem 2023
- CVE-2015-1012024İzleyin
WDS Multisite Aggregate Plugin WDS_Multisite_Aggregate_Options.php update_options cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1webdevstudios · wds multisite aggregate10 Tem 2023
- CVE-2015-1011924İzleyin
View All Posts Page Plugin view-all-posts-pages.php action_admin_notices_activation cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1oomphinc · view all post\'s pages10 Tem 2023
- CVE-2015-1011824İzleyin
cchetanonline WP-CopyProtect wp-copyprotect.php CopyProtect_options_page cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0wp-copyprotect project · wp-copyprotect12 Haz 2023
- CVE-2018-2508730İzleyin
Arborator Server project.cgi start denial of service
YüksekCVSS 7,5İstismar yokEPSS %1arborator server project · arborator server5 Haz 2023
- CVE-2017-2018524İzleyin
Fuzzy SWMP GET Parameter swmp.php cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0server web monitor page project · server web monitor page5 Haz 2023
- CVE-2015-1011724İzleyin
Gravity Forms DPS PxPay Plugin cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1webaware · gf windcave free5 Haz 2023
- CVE-2015-1011635İzleyin
RealFaviconGenerator Favicon Plugin class-favicon-by-realfavicongenerator-admin.php install_new_favicon cross-site request forgery
YüksekCVSS 8,8İstismar yokEPSS %0realfavicongenerator · favicon by realfavicongenerator5 Haz 2023
- CVE-2013-1003030İzleyin
Exit Box Lite Plugin wordpress-exit-box-lite.php information disclosure
YüksekCVSS 7,5İstismar yokEPSS %1angrybyte · wordpress exit box lite5 Haz 2023
- CVE-2013-1002935İzleyin
Exit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgery
YüksekCVSS 8,8İstismar yokEPSS %0angrybte · wordpress exit box lite5 Haz 2023