Wisdom

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-25687 Apr 05, 20:45 CRITICAL POC Act Now

Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by exploiting unsafe eval. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Path Traversal Pegasus Cms Wisdom

NVD Exploit-DB

CVSS 4.0

9.3

EPSS

0.3%

CVE-2014-6816 Sep 30, 10:55 MEDIUM This Month

The WISDOM (aka lvtu99.com.nescmxiaoniuniu) application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Wisdom

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2019-25687

EPSS 0% CVSS 9.3

CRITICAL POC Act Now

PHP RCE Path Traversal +2

NVD Exploit-DB

CVE-2014-6816

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Wisdom

NVD