Lucene search
K

1208 matches found

CNNVD
CNNVD
added 2025/01/13 12:0 a.m.1 views

WordPress plugin WPEX Replace DB Urls 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS7.7AI score0.0012EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/01/12 12:18 a.m.3 views

SUSE CVE-2024-48875

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't take devreplace rwsem on task already holding it Running fstests btrfs/011 with MKFSOPTIONS="-O rst" to force the usage of the RAID stripe-tree, we get the following splat from lockdep: BTRFS info device sdd:...

5.5CVSS7.6AI score0.00006EPSS
Exploits0References3
OSV
OSV
added 2025/01/11 1:15 p.m.1 views

DEBIAN-CVE-2024-48875

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't take devreplace rwsem on task already holding it Running fstests btrfs/011 with MKFSOPTIONS="-O rst" to force the usage of the RAID stripe-tree, we get the following splat from lockdep: BTRFS info device sdd:...

5.5CVSS5.6AI score0.00006EPSS
Exploits0References1
OSV
OSV
added 2025/01/11 1:15 p.m.4 views

AZL-56216 CVE-2024-48875 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't take devreplace rwsem on task already holding it Running fstests btrfs/011 with MKFSOPTIONS="-O rst" to force the usage of the RAID stripe-tree, we get the following splat from lockdep: BTRFS info device sdd:...

5.5CVSS6.6AI score0.00006EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/11 12:25 p.m.3 views

CVE-2024-48875 btrfs: don't take dev_replace rwsem on task already holding it

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't take devreplace rwsem on task already holding it Running fstests btrfs/011 with MKFSOPTIONS="-O rst" to force the usage of the RAID stripe-tree, we get the following splat from lockdep: BTRFS info device sdd:...

7.5AI score0.00006EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/11 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the Btrfs filesystem attempting to fetch the devreplace rwsem again when the task is already in possession o...

5.5CVSS6.5AI score0.00006EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/01/07 10:47 a.m.3 views

WordPress WPEX Replace DB Urls Plugin <= 0.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin WPEX Replace DB Urls versions = 0.4.0...

7.1CVSS6.1AI score0.0012EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/01/03 10:6 p.m.1 views

WordPress Backup Migration plugin <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace' vulnerability

Unauthenticated PHP Object Injection via 'recursiveunserializereplace' vulnerability discovered by Webbernaut in WordPress Plugin Backup Migration versions = 1.4.6...

8.8CVSS7.3AI score0.02351EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/12/27 3:15 p.m.1 views

DEBIAN-CVE-2024-56664

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

7CVSS6AI score0.00017EPSS
Exploits0References1
CVE
CVE
added 2024/12/27 3:6 p.m.185 views

CVE-2024-56664

CVE-2024-56664 is a Linux kernel issue in bpf, sockmap where replacing an element (with a different socket) can race with the socket’s close(), causing sock_map_delete to unref the wrong element. The result is a potential use-after-free/refcount mismanagement during sock map deletions (as detaile...

7CVSS6.4AI score0.00017EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2024/12/27 3:6 p.m.21 views

CVE-2024-56664 bpf, sockmap: Fix race between element replace and close()

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

0.00017EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2024/12/27 3:6 p.m.6 views

CVE-2024-56664

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

7CVSS6AI score0.00017EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/12/23 12:0 a.m.11 views

D-Link DAP-1520 DoS Vulnerability (SAP10395)

D-Link DAP-1520 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS5.3AI score0.0031EPSS
Exploits0References2
NVD
NVD
added 2024/12/13 3:15 p.m.5 views

CVE-2024-54244

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through = 1.3...

6.5CVSS0.00295EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.9 views

CVE-2024-54244 WordPress Easy Replace plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Easy Replace allows Stored XSS.This issue affects Easy Replace: from n/a through 1.3...

6.5CVSS6.8AI score0.00295EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.21 views

CVE-2024-54244 WordPress Easy Replace plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through = 1.3...

6.5CVSS0.00295EPSS
Exploits0References1
CVE
CVE
added 2024/12/13 2:24 p.m.33 views

CVE-2024-54244

CVE-2024-54244: WordPress Easy Replace plugin (versions n/a through 1.3) suffers a Cross-Site Scripting (Stored XSS) due to improper input neutralization during web page generation. Affected product: WordPress plugin Easy Replace. Root cause: improper neutralization of input leading to stored XSS...

6.5CVSS7.2AI score0.00295EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.1 views

WordPress plugin Easy Replace 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.00295EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.2 views

PT-2024-36123 · Unknown · Think201 Easy Replace

Name of the Vulnerable Software and Affected Versions: Think201 Easy Replace versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

6.5CVSS5.9AI score0.00295EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/12/06 10:10 p.m.3 views

WordPress Easy Replace plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Easy Replace versions = 1.3...

6.5CVSS6.1AI score0.00295EPSS
Exploits0Affected Software1
Rows per page
Query Builder