Lucene search
+L

1156 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 2:47 a.m.•11 views

CVE-2023-1975

Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8...

7.6CVSS6.6AI score0.00586EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:32 a.m.•8 views

CVE-2023-1239

Cross-site Scripting XSS - Reflected in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS6.1AI score0.00526EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:31 a.m.•10 views

CVE-2023-1242

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.9AI score0.0062EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:50 p.m.•17 views

CVE-2021-4408

The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing or incorrect nonce validation on the updateanswer function. This makes it possible for unauthenticated attackers to update answers to questions...

4.3CVSS5.8AI score0.00384EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:17 a.m.•27 views

CVE-2013-1401

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...

9.8CVSS7.3AI score0.04973EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/05/14 10:29 p.m.•51 views

CVE-2025-30436

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls...

9.1CVSS5.9AI score0.00486EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/12 10:15 p.m.•15 views

CVE-2025-30436

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls...

9.1CVSS5.8AI score0.00486EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/12 10:15 p.m.•20 views

CVE-2025-30436

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls...

9.1CVSS0.00486EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/12 9:42 p.m.•86 views

CVE-2025-30436

A security vulnerability exists in iOS and iPadOS versions prior to 18.4 due to insufficient restriction of options on locked devices. This Improper Access Control issue allows an attacker to potentially use Siri to enable Auto-Answer Calls . Remediation is available by updating to iOS 18.4 or iP...

9.1CVSS6AI score0.00486EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2025/05/12 9:42 p.m.•11 views

CVE-2025-30436

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls...

8.1AI score0.00486EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/12 12:00 a.m.•6 views

CVE-2025-30436: Improper Access Control

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls...

9.1CVSS5.7AI score0.00486EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/12 12:00 a.m.•22 views

PT-2025-20750 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.4 iPadOS versions prior to 18.4 Description: An issue allows an attacker to potentially use Siri to enable Auto-Answer Calls. This could be exploited on a locked device. The estimated number of potentially affected...

9.1CVSS6AI score0.00486EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/04/30 12:00 a.m.•16 views

Enhancing Security and Strengthening Defenses in Automated Short-Answer Grading Systems

This study examines vulnerabilities in transformer-based automated short-answer grading systems used in medical education, with a focus on how these systems can be manipulated through adversarial gaming strategies. Our research identifies three main types of gaming strategies that exploit the...

7.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/04/25 6:14 p.m.•15 views

CVE-2025-32647

Deserialization of Untrusted Data vulnerability in PickPlugins Question Answer question-answer allows Object Injection.This issue affects Question Answer: from n/a through = 1.2.73...

8.8CVSS7.2AI score0.00481EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/25 5:32 p.m.•15 views

CVE-2025-32646

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Question Answer question-answer allows Reflected XSS.This issue affects Question Answer: from n/a through = 1.2.70...

7.1CVSS7.2AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•15 views

CVE-2025-32646

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Question Answer question-answer allows Reflected XSS.This issue affects Question Answer: from n/a through = 1.2.70...

7.1CVSS0.00288EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•14 views

CVE-2025-32647

Deserialization of Untrusted Data vulnerability in PickPlugins Question Answer question-answer allows Object Injection.This issue affects Question Answer: from n/a through = 1.2.73...

8.8CVSS0.00481EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:47 p.m.•61 views

CVE-2025-32646

CVE-2025-32646 corresponds to a WordPress WordPress Plugin Issue: Question Answer

7.1CVSS7.2AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:47 p.m.•59 views

CVE-2025-32647

CVE-2025-32647 is a PHP object-injection deserialization vulnerability in the WordPress PickPlugins Question Answer plugin. Affected software: Question Answer (WordPress) versions up to 1.2.70 (Wordfence/Red Hat entries). Several sources indicate a patched fix exists in version 1.2.73 (Patchstack...

8.8CVSS7.2AI score0.00481EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:47 p.m.•4 views

CVE-2025-32646 WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Question Answer question-answer allows Reflected XSS.This issue affects Question Answer: from n/a through = 1.2.70...

7.1CVSS8.6AI score0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder