Lucene search
K

99 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:45 a.m.5 views

CVE-2022-0384

The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapigetwpusers AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog...

4.3CVSS6.5AI score0.00299EPSS
Exploits2References1
Circl
Circl
added 2026/01/08 5:49 p.m.3 views

RHSA-2026:0384

creationtimestamp| type| source ---|---|--- 2026-01-08 17:49:29+00:00| seen| https://gist.github.com/Darkcrai86/6d190f25f63737d26efffc2d4389135b 2026-01-08 18:11:57+00:00| published-proof-of-concept| Telegram/Lge4284wsR8RZQjN49TNfOaqkj39MhV6KOAFAkydmYlrvo 2026-01-24 21:25:55+00:00| seen|...

4.8AI score
Exploits0References3
EUVD
EUVD
added 2026/01/02 6:30 p.m.2 views

EUVD-2026-0384

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:59 p.m.4 views

CVE-2020-0384

In Parseart of easmdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

5.5CVSS6.6AI score0.00136EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:37 a.m.3 views

CVE-2019-0384

Transaction Management in SAP Treasury and Risk Management corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 does not perform necessary authorization checks for functionalities that require user identity...

8.8CVSS7AI score0.00334EPSS
Exploits0References1
Circl
Circl
added 2024/02/05 11:31 p.m.1 views

CVE-2024-0384

creationtimestamp| type| source ---|---|--- 2024-02-05 23:31:29+00:00| seen| https://t.me/ctinow/179600 2024-02-12 08:06:49+00:00| seen| https://t.me/ctinow/182930...

6.4CVSS6.7AI score0.02049EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/05 9:21 p.m.14 views

CVE-2024-0384 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Recipe Notes in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above...

6.4CVSS5.8AI score0.02049EPSS
Exploits0References2
CVE
CVE
added 2024/02/05 9:21 p.m.43 views

CVE-2024-0384

The CVE-2024-0384 vulnerability affects the WP Recipe Maker plugin for WordPress, where Stored Cross-Site Scripting is possible via Recipe Notes in all versions up to 9.1.0 due to insufficient input sanitization and output escaping. Authentication requirement is at contributor level or higher, en...

6.4CVSS5.2AI score0.02049EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/04/20 12:35 p.m.1 views

CVE-2023-0384

creationtimestamp| type| source ---|---|--- 2023-04-20 12:35:35+00:00| seen| https://t.me/cibsecurity/62500...

7.5CVSS7.3AI score0.00478EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/04/20 8:2 a.m.19 views

CVE-2023-0384 Uncontrolled Resource Consuption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...

6.5CVSS7.6AI score0.00478EPSS
Exploits0References2
CVE
CVE
added 2023/04/20 8:2 a.m.59 views

CVE-2023-0384

CVE-2023-0384 affects M‑Files Server prior to 23.4.12528.1, where user‑controlled operations can cause uncontrolled memory consumption in a scheduled job, leading to a Denial of Service. The issue is documented across multiple sources (e.g., M‑Files security advisories, CNVD, PT Security) with th...

7.5CVSS6.6AI score0.00478EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/20 8:2 a.m.12 views

CVE-2023-0384 Uncontrolled Resource Consuption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...

6.5CVSS6.8AI score0.00478EPSS
Exploits0References2
NVD
NVD
added 2022/03/07 9:15 a.m.10 views

CVE-2022-0384

The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapigetwpusers AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog...

4.3CVSS0.00299EPSS
Exploits2References2
Cvelist
Cvelist
added 2022/03/07 8:16 a.m.13 views

CVE-2022-0384 Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure

The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapigetwpusers AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog...

4.9AI score0.00299EPSS
Exploits2References2
CVE
CVE
added 2022/03/07 8:16 a.m.88 views

CVE-2022-0384

The CVE-2022-0384 entry applies to the Video Conferencing with Zoom WordPress plugin prior to version 3.8.17. The vulnerability arises from lack of authorization in the vczapi_get_wp_users AJAX action, allowing any authenticated user (e.g., subscribers) to download the blog’s registered email add...

4.3CVSS4.5AI score0.00299EPSS
Exploits2References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2017-0384)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.00768EPSS
Exploits8References9
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.5 views

Mageia: Security Advisory (MGASA-2015-0384)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.27 views

Mageia: Security Advisory (MGASA-2021-0384)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.0056EPSS
Exploits5References8
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2014-0239)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS5.5AI score0.01268EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.29 views

Mageia: Security Advisory (MGASA-2014-0384)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS9.1AI score0.0182EPSS
Exploits0References4
Rows per page
Query Builder