Lucene search
+L

8695 matches found

GithubExploit
GithubExploit
added 2023/11/14 8:40 a.m.37 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Liquidweb Restrict_Content

CVE-2023-47668 Restrict Content = 3.2.7 - Information Expo...

7.5CVSS8AI score0.01009EPSS
SaveExploits2
NVD
NVD
added 2023/11/13 12:15 a.m.28 views

CVE-2023-26516

Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...

8.8CVSS0.00389EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/13 12:15 a.m.6 views

CVE-2023-26516

Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...

8.8CVSS7.3AI score0.00389EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/13 12:15 a.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...

6.8CVSS7.5AI score0.00389EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/12 11:48 p.m.83 views

CVE-2023-26516

CVE-2023-26516 is a CSRF vulnerability in the WordPress WPIndeed Debug Assistant plugin (versions ≤ 1.4). The described root cause is unauthorized CSRF execution that can affect unauthenticated users, with impacts stated as high confidentiality, integrity, and availability by CVSS 3.1 metrics (8....

8.8CVSS8.8AI score0.00389EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/12 11:48 p.m.14 views

CVE-2023-26516 WordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...

8.8CVSS7.1AI score0.00389EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/12 12:0 a.m.8 views

PT-2023-20695 · WordPress · Wpindeed Debug Assistant

Name of the Vulnerable Software and Affected Versions: WPIndeed Debug Assistant plugin versions 1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

8.8CVSS8.6AI score0.00389EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/12 12:0 a.m.9 views

WordPress Plugin Debug Assistant Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

8.8CVSS6.5AI score0.00389EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/10 11:15 p.m.43 views

CVE-2023-4804

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

10CVSS0.00807EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/10 11:15 p.m.6 views

CVE-2023-4804

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

9.8CVSS5.8AI score0.00807EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/10 11:15 p.m.23 views

Code injection

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

7.5CVSS7.1AI score0.00807EPSS
SaveExploits0References2Affected Software6
CVE
CVE
added 2023/11/10 10:17 p.m.97 views

CVE-2023-4804

CVE-2023-4804 affects Johnson Controls Quantum HD Unity family. The root cause is an active debug code/debug features accidentally exposed, allowing an unauthorized user to access debugging functionality. Affected products and versions include: Quantum HD Unity Compressor panels (Q5: all versions...

10CVSS9.6AI score0.00807EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/10 10:17 p.m.42 views

CVE-2023-4804 Quantum HD Unity

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

10CVSS9.6AI score0.00807EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/11/10 10:17 p.m.14 views

CVE-2023-4804 Quantum HD Unity

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

10CVSS6.9AI score0.00807EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/10 12:0 a.m.8 views

Johnson Controls FRICK Quantum HD Unity System Controller Security Vulnerability

Johnson Controls FRICK Quantum HD Unity System Controller is an easy-to-use centralized control system from Johnson Controls, Inc. A security vulnerability exists in the Johnson Controls FRICK Quantum HD Unity System Controller that originates from allowing an unauthorized attacker to access...

10CVSS6.7AI score0.00807EPSS
SaveExploits0References3
ICS
ICS
added 2023/11/09 7:0 a.m.56 views

Johnson Controls Quantum HD Unity

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable Remotely/Low attack complexity Vendor : Johnson Controls Inc. Equipment : Quantum HD Unity Vulnerability : Active Debug Code 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized user to...

10CVSS9.6AI score0.00807EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/11/09 12:0 a.m.8 views

PT-2023-7057

Name of the Vulnerable Software and Affected Versions Quantum HD Unity products affected versions not specified Quantum HD Unity Compressor affected versions not specified Quantum HD Unity AcuAir affected versions not specified Quantum HD Unity Engine Room affected versions not specified Quantum ...

10CVSS9.5AI score0.00807EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2023/11/08 9:15 p.m.4 views

CVE-2023-45875

An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/08 9:15 p.m.7 views

CVE-2023-45875

An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits0References3
PyPA
PyPA
added 2023/11/08 9:15 p.m.11 views

PYSEC-2023-235

An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster...

7.5CVSS6.9AI score0.00736EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder