Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Поиск уязвимостей по источнику БДУ ФСТЭК

БДУ ФСТЭК

Поиск уязвимостей по источнику Microsoft MSRC

Microsoft MSRC

Поиск уязвимостей по источнику NVD

NVD

Поиск уязвимостей по источнику Oracle ELSA

Oracle ELSA

Поиск уязвимостей по источнику Red Hat CVE

Red Hat CVE

Поиск уязвимостей по источнику РЕД ОС

РЕД ОС

Поиск уязвимостей по источнику Rocky RLSA

Rocky RLSA

Поиск уязвимостей по источнику SUSE CVRF

SUSE CVRF

Поиск уязвимостей по источнику Ubuntu

Ubuntu

Поиск уязвимостей по источнику Debian

Debian

Поиск уязвимостей по источнику Github

Github

Поиск уязвимостей по источнику ALT Linux

ALT Linux

Количество 1 928

Количество 1 928

debian логотип

CVE-2016-9263

около 9 лет назад

WordPress through 4.8.2, when domain-based flashmediaelement.swf sandb ...

CVSS3: 4.7
EPSS: Низкий
ubuntu логотип

CVE-2016-7169

почти 10 лет назад

Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.

CVSS3: 6.3
EPSS: Низкий
nvd логотип

CVE-2016-7169

почти 10 лет назад

Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.

CVSS3: 6.3
EPSS: Низкий
debian логотип

CVE-2016-7169

почти 10 лет назад

Directory traversal vulnerability in the File_Upload_Upgrader class in ...

CVSS3: 6.3
EPSS: Низкий
ubuntu логотип

CVE-2016-7168

почти 10 лет назад

Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename.

CVSS3: 4.8
EPSS: Низкий
nvd логотип

CVE-2016-7168

почти 10 лет назад

Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename.

CVSS3: 4.8
EPSS: Низкий
debian логотип

CVE-2016-7168

почти 10 лет назад

Cross-site scripting (XSS) vulnerability in the media_handle_upload fu ...

CVSS3: 4.8
EPSS: Низкий
ubuntu логотип

CVE-2016-6897

почти 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896.

CVSS3: 6.5
EPSS: Средний
nvd логотип

CVE-2016-6897

почти 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896.

CVSS3: 6.5
EPSS: Средний
debian логотип

CVE-2016-6897

почти 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_ ...

CVSS3: 6.5
EPSS: Средний
ubuntu логотип

CVE-2016-6896

почти 10 лет назад

Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. (dot dot) in the plugin parameter to wp-admin/admin-ajax.php, as demonstrated by /dev/random read operations that deplete the entropy pool.

CVSS3: 7.1
EPSS: Средний
nvd логотип

CVE-2016-6896

почти 10 лет назад

Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. (dot dot) in the plugin parameter to wp-admin/admin-ajax.php, as demonstrated by /dev/random read operations that deplete the entropy pool.

CVSS3: 7.1
EPSS: Средний
debian логотип

CVE-2016-6896

почти 10 лет назад

Directory traversal vulnerability in the wp_ajax_update_plugin functio ...

CVSS3: 7.1
EPSS: Средний
ubuntu логотип

CVE-2016-6635

больше 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2016-6635

больше 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2016-6635

больше 10 лет назад

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_comp ...

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2016-6634

больше 10 лет назад

Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2016-6634

больше 10 лет назад

Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2016-6634

больше 10 лет назад

Cross-site scripting (XSS) vulnerability in the network settings page ...

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2016-5839

больше 10 лет назад

WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
debian логотип
CVE-2016-9263

WordPress through 4.8.2, when domain-based flashmediaelement.swf sandb ...

CVSS3: 4.7
2%
Низкий
около 9 лет назад
ubuntu логотип
CVE-2016-7169

Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.

CVSS3: 6.3
3%
Низкий
почти 10 лет назад
nvd логотип
CVE-2016-7169

Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.

CVSS3: 6.3
3%
Низкий
почти 10 лет назад
debian логотип
CVE-2016-7169

Directory traversal vulnerability in the File_Upload_Upgrader class in ...

CVSS3: 6.3
3%
Низкий
почти 10 лет назад
ubuntu логотип
CVE-2016-7168

Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename.

CVSS3: 4.8
3%
Низкий
почти 10 лет назад
nvd логотип
CVE-2016-7168

Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename.

CVSS3: 4.8
3%
Низкий
почти 10 лет назад
debian логотип
CVE-2016-7168

Cross-site scripting (XSS) vulnerability in the media_handle_upload fu ...

CVSS3: 4.8
3%
Низкий
почти 10 лет назад
ubuntu логотип
CVE-2016-6897

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896.

CVSS3: 6.5
29%
Средний
почти 10 лет назад
nvd логотип
CVE-2016-6897

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896.

CVSS3: 6.5
29%
Средний
почти 10 лет назад
debian логотип
CVE-2016-6897

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_ ...

CVSS3: 6.5
29%
Средний
почти 10 лет назад
ubuntu логотип
CVE-2016-6896

Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. (dot dot) in the plugin parameter to wp-admin/admin-ajax.php, as demonstrated by /dev/random read operations that deplete the entropy pool.

CVSS3: 7.1
38%
Средний
почти 10 лет назад
nvd логотип
CVE-2016-6896

Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. (dot dot) in the plugin parameter to wp-admin/admin-ajax.php, as demonstrated by /dev/random read operations that deplete the entropy pool.

CVSS3: 7.1
38%
Средний
почти 10 лет назад
debian логотип
CVE-2016-6896

Directory traversal vulnerability in the wp_ajax_update_plugin functio ...

CVSS3: 7.1
38%
Средний
почти 10 лет назад
ubuntu логотип
CVE-2016-6635

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option.

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
nvd логотип
CVE-2016-6635

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option.

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
debian логотип
CVE-2016-6635

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_comp ...

CVSS3: 8.8
2%
Низкий
больше 10 лет назад
ubuntu логотип
CVE-2016-6634

Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS3: 6.1
3%
Низкий
больше 10 лет назад
nvd логотип
CVE-2016-6634

Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS3: 6.1
3%
Низкий
больше 10 лет назад
debian логотип
CVE-2016-6634

Cross-site scripting (XSS) vulnerability in the network settings page ...

CVSS3: 6.1
3%
Низкий
больше 10 лет назад
ubuntu логотип
CVE-2016-5839

WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified vectors.

CVSS3: 7.5
3%
Низкий
больше 10 лет назад

Уязвимостей на страницу