Lucene search
+L

2503 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•4 views

CVE-2023-31360: Incorrect Default Permissions

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

7.3CVSS6.4AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 4:33 p.m.•21 views

CVE-2020-16097

On controllers running versions of v8.20 prior to vCR8.20.200221b distributed in v8.20.1093MR2, v8.10 prior to vGR8.10.179 distributed in v8.10.1211MR5, v8.00 prior to vGR8.00.165 Distributed in v8.00.1228MR6, v7.90 prior to vGR7.90.165 distributed in v7.90.1038MRX, v7.80 or earlier, It is possib...

7.3CVSS6.7AI score0.00306EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 7:00 a.m.•15 views

CVE-2024-32562

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Stored XSS.This issue affects Z Y N I T H: from n/a through 7.4.9...

8.6CVSS5.2AI score0.00463EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:35 a.m.•10 views

CVE-2024-5653

A vulnerability, which was classified as critical, has been found in Chanjet Smooth T+system 3.5. This issue affects some unknown processing of the file /tplus/UFAQD/keyEdit.aspx. The manipulation of the argument KeyID leads to sql injection. The attack may be initiated remotely. The exploit has...

9.8CVSS7.8AI score0.00506EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 4:09 a.m.•16 views

CVE-2024-54305

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtexpress J Express Malaysia jt-express allows Reflected XSS.This issue affects J Express Malaysia: from n/a through = 2.0.13...

7.1CVSS7.2AI score0.00436EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
•added 2025/02/01 11:30 a.m.•32 views

Foreign Hackers Are Using Google’s Gemini in Attacks on the US

Plus: WhatsApp discloses nearly 100 targets of spyware, hackers used the AT&T breach to hunt for details on US politicians, and more...

7.3AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
•added 2025/01/17 12:14 a.m.•12 views

Hackers Likely Stole FBI Call Logs From AT&T That Could Compromise Informants

A breach of AT&T that exposed “nearly all” of the company’s customers may have included records related to confidential FBI sources, potentially explaining the bureau’s new embrace of end-to-end encryption...

7.2AI score
SaveExploits0
CVE
CVE
•added 2025/01/07 4:57 p.m.•73 views

CVE-2025-22363

CVE-2025-22363 is a Missing Authorization vulnerability in Allada T-shirt Designer for Woocommerce (WordPress plugin). Public export lists affected version range: n/a through 1.1. Red Hat entry confirms Missing Authorization as the issue, affecting the Allada T-shirt Designer for Woocommerce plug...

5.3CVSS7.2AI score0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/07 4:57 p.m.•13 views

CVE-2025-22363 WordPress Allada T-shirt Designer for Woocommerce plugin <= 1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hermann LAHAMI Allada T-shirt Designer for Woocommerce allada-tshirt-designer-for-woocommerce.This issue affects Allada T-shirt Designer for Woocommerce: from n/a through = 1.1...

5.3CVSS8.6AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 4:57 p.m.•39 views

CVE-2025-22363 WordPress Allada T-shirt Designer for Woocommerce plugin <= 1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hermann LAHAMI Allada T-shirt Designer for Woocommerce allada-tshirt-designer-for-woocommerce.This issue affects Allada T-shirt Designer for Woocommerce: from n/a through = 1.1...

5.3CVSS0.00285EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•12 views

WordPress plugin Allada T-shirt Designer for Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.2AI score0.00285EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•1 views

CVE-2025-22363: Missing Authorization

Missing Authorization vulnerability in Hermann LAHAMI Allada T-shirt Designer for Woocommerce allada-tshirt-designer-for-woocommerce.This issue affects Allada T-shirt Designer for Woocommerce: from n/a through = 1.1...

5.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•13 views

PT-2025-4475 · WordPress · Orion Allada T-Shirt Designer For Woocommerce

Name of the Vulnerable Software and Affected Versions: ORION Allada T-shirt Designer for Woocommerce versions 1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability. This problem affects the ORION Allada T-shirt Designer for Woocommerce, allowing unauthorized...

5.3CVSS9.3AI score0.00285EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2025/01/03 1:45 p.m.•14 views

WordPress Allada T-shirt Designer for Woocommerce plugin <= 1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Allada T-shirt Designer for Woocommerce versions = 1.1...

5.3CVSS7AI score0.00285EPSS
SaveExploits0Affected Software1
Krebs on Security
Krebs on Security
•added 2024/12/31 4:05 a.m.•20 views

U.S. Army Soldier Arrested in AT&T, Verizon Extortions

Federal authorities have arrested and indicted a 20-year-old U.S. Army soldier on suspicion of being Kiberphant0m , a cybercriminal who has been selling and leaking sensitive customer call records stolen earlier this year from AT &T and Verizon. As first reported by KrebsOnSecurity last month, th...

7.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2024/12/27 3:15 p.m.•14 views

CVE-2024-56584

In the Linux kernel, the following vulnerability has been resolved: iouring/tctx: work around xastore allocation error issue syzbot triggered the following WARNON: WARNING: CPU: 0 PID: 16 at iouring/tctx.c:51 iouringfree+0xfa/0x140 iouring/tctx.c:51 which is the WARNONONCE!xaempty&tctx-;xa; sanit...

5.5CVSS6.2AI score0.00237EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/24 12:00 a.m.•10 views

PT-2024-17579 · WordPress · Export Customers Data Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: Export Customers Data plugin for WordPress versions up to, and including, 1.2.3 Description: The issue is related to Reflected Cross-Site Scripting via the t parameter due to insufficient input sanitization and output escaping. This allows...

6.1CVSS8.7AI score0.00299EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/24 12:00 a.m.•1 views

CVE-2024-12405: Improper Neutralization of Input During Web Page Generation

The Export Customers Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 't' parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6AI score0.00299EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/12/17 12:00 a.m.•9 views

Directory Traversal Vulnerability in Changjitong T+ of Changjitong Information Technology Co.

T+ is a dynamic, intelligent and fashionable Internet management software, mainly for small and medium-sized industrial, trade and commerce enterprises with integrated financial and business applications, incorporating elements of socialization, mobility, Internet of Things, e-commerce and Intern...

6.6AI score
SaveExploits0
NVD
NVD
•added 2024/12/13 3:15 p.m.•30 views

CVE-2024-54305

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtexpress J&T Express Malaysia jt-express allows Reflected XSS.This issue affects J&T Express Malaysia: from n/a through = 2.0.13...

7.1CVSS0.00436EPSS
SaveExploits0References1
Rows per page
Query Builder