Lucene search
+L

2944 matches found

OSV
OSV
•added 2012/09/14 7:55 p.m.•20 views

CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

6AI score
SaveExploits0References4
OSV
OSV
•added 2012/09/14 7:55 p.m.•14 views

DEBIAN-CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

3.5CVSS6.7AI score0.01675EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2012/09/14 7:55 p.m.•31 views

CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

3.5CVSS5.9AI score0.01675EPSS
SaveExploits1References4
CVE
CVE
•added 2012/09/14 7:00 p.m.•85 views

CVE-2012-4422

CVE-2012-4422 affects WordPress prior to 3.4.2 with multisite enabled. The vulnerability arises when network-wide activation of plugins is performed without verifying network-administrator privileges, potentially allowing remote authenticated users to make unintended plugin changes by abusing the...

3.5CVSS6AI score0.01675EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2012/09/14 7:00 p.m.•54 views

CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

3.5CVSS4.9AI score0.01675EPSS
SaveExploits1
Mend
Mend
•added 2012/09/14 7:00 p.m.•3 views

CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

3.5CVSS0.01675EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2012/09/14 12:00 a.m.•16 views

PT-2012-5392

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.4.2 Description The issue allows remote authenticated users to make unintended plugin changes by leveraging the Administrator role, due to insufficient privilege checks in the multisite feature. This occurs becaus...

3.5CVSS0.01675EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/14 12:00 a.m.•6 views

CVE-2012-4422: Undefined Security Weakness

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

3.5CVSS5.9AI score0.01675EPSS
SaveExploits1References2
zdt
zdt
•added 2012/09/04 12:00 a.m.•30 views

Sciretech 3.0.0 SQL Injection / CSRF Vulnerability

Exploit for php platform in category web applications ========================================================= Vulnerable Software: Sciretech ® Multimedia Manager Version 3.0.0 Aka: Sciretech ® File Manager Version 3.0.0 Official site: www.sciretech.com Vulnerabilities: Blind SQL Injection And...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2012/06/06 12:00 a.m.•30 views

Microsoft certificates vulnerability

Terminal Services activation certificate may be used to sign code on behalf of Microsoft...

2AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2012/05/30 12:00 a.m.•66 views

Ganesha Digital Library 4.0 Cross Site Scripting / SQL Injection

===================================================== Ganesha Digital Library 4.0 Multiple Vulnerabilities ===================================================== :---------------------------------------------------------------------------------------------------------------------------------------...

0.7AI score
SaveExploits0
exploitpack
exploitpack
•added 2012/05/30 12:00 a.m.•42 views

Ganesha Digital Library 4.0 - Multiple Vulnerabilities

Ganesha Digital Library 4.0 - Multiple Vulnerabilities ===================================================== Ganesha Digital Library 4.0 Multiple Vulnerabilities =====================================================...

0.7AI score
SaveExploits0
zdt
zdt
•added 2012/05/30 12:00 a.m.•68 views

Ganesha Digital Library 4.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ===================================================== Ganesha Digital Library 4.0 Multiple Vulnerabilities =====================================================...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/05/30 12:00 a.m.•56 views

Ganesha Digital Library 4.0 - Multiple Vulnerabilities

===================================================== Ganesha Digital Library 4.0 Multiple Vulnerabilities ===================================================== :---------------------------------------------------------------------------------------------------------------------------------------...

5.3AI score
SaveExploits0
Fedora
Fedora
•added 2012/03/26 3:54 a.m.•37 views

[SECURITY] Fedora 15 Update: systemd-26-18.fc15

systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...

3.3CVSS1.3AI score0.00323EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2012/03/26 12:00 a.m.•28 views

Fedora Update for systemd FEDORA-2012-4024

Check for the Version of systemd OpenVAS Vulnerability Test Fedora Update for systemd FEDORA-2012-4024 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

3.3CVSS9.5AI score0.00323EPSS
SaveExploits1References2
Fedora
Fedora
•added 2012/03/11 11:20 p.m.•35 views

[SECURITY] Fedora 16 Update: systemd-37-15.fc16

systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...

6.3CVSS1.3AI score0.00352EPSS
SaveExploits0
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2012/02/16 12:00 a.m.•48 views

Stable Channel Update for Chromebooks

The Google Chrome team is happy to announce the release of Chrome 17 on the Stable Channel for Chromebooks Acer AC700, Samsung Series 5, and Cr-48. You can read more about the Chrome version 17.0.963.54 Platform version: 1412.186.0 Release highlights: Read about improvements to Chrome over on the...

6.9CVSS7.8AI score0.1084EPSS
SaveExploits11Affected Software1
exploitpack
exploitpack
•added 2012/01/17 12:00 a.m.•50 views

Rockwell Automation FactoryTalk Activation Server - Multiple Denial of Service Vulnerabilities

Rockwell Automation FactoryTalk Activation Server - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/51444/info Rockwell Automation FactoryTalk Activation Server is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issues...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/01/17 12:00 a.m.•95 views

Rockwell Automation FactoryTalk Activation Server - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/51444/info Rockwell Automation FactoryTalk Activation Server is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issues to crash the affected application, denying service to legitimate users...

5CVSS5.2AI score0.1021EPSS
SaveExploits1
Rows per page
Query Builder