Lucene search
+L

103 matches found

CVE
CVE
added 2025/01/15 10:58 a.m.347 views

CVE-2025-0447

CVE-2025-0447 affects Google Chrome/Chromium where an inappropriate Navigation implementation before 132.0.6834.83 allows privilege escalation via a crafted HTML page. The issue is documented across multiple sources (Chromium/DC updates and Debian security advisory), with fixes shipped in Chromiu...

8.8CVSS6.8AI score0.00453EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2025/01/15 10:58 a.m.16 views

CVE-2025-0447

Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

8.8CVSS8AI score0.00453EPSS
SaveExploits1
Patchstack
Patchstack
added 2024/03/14 12:0 a.m.14 views

WordPress ArtiBot Plugin <= 1.1.6 is vulnerable to Broken Access Control

Software ArtiBot Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0447 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e881969f36c0 Credits Francesco Carlucci Required privilege...

5CVSS6.5AI score0.00585EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/03/13 4:15 p.m.11 views

CVE-2024-0447

The ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the artibotupdate function in all versions up to, and including, 1.1.6. This makes it possible for authenticated attackers, with...

5CVSS5.8AI score0.00585EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/13 3:27 p.m.89 views

CVE-2024-0447

CVE-2024-0447 affects the ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress. The vulnerability is caused by a missing capability check in the artibot_update function, present in all versions up to and including 1.1.6, allowing authenticated attackers with subscriber-level access a...

5CVSS5.8AI score0.00585EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2023/02/20 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2023:0447-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00906EPSS
SaveExploits0References4
NVD
NVD
added 2023/01/23 5:15 p.m.23 views

CVE-2023-0447

The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clearallcache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear t...

4.3CVSS4.3AI score0.00591EPSS
SaveExploits0References4
CVE
CVE
added 2023/01/23 4:30 p.m.59 views

CVE-2023-0447

CVE-2023-0447 affects the WordPress plugin My YouTube Channel . The vulnerability is an authorization bypass caused by a missing capability check in the clear_all_cache function, present in versions up to and including 3.0.12.1. This could allow authenticated attackers with subscriber-level permi...

4.3CVSS4.4AI score0.00591EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
added 2023/01/06 12:0 a.m.12 views

WordPress YouTube Channel Plugin <= 3.0.12.1 is vulnerable to Broken Access Control

Software YouTube Channel Type Plugin Vulnerable versions = 3.0.12.1 Fixed in 3.23.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-0447 Patch priority Medium CVSS severity Medium 4.3 Developer Aleksandar Urošević PSID 5cd4c6177416 Credits WordfenceTeam...

4.3CVSS6.8AI score0.00591EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2022/04/11 2:40 p.m.88 views

CVE-2022-0447

The CVE-2022-0447 issue affects the WordPress Post Grid plugin prior to version 2.1.16. The vulnerability arises because the post_types parameter is not sanitized/escaped before being echoed in the response of the post_grid_update_taxonomies_terms_by_posttypes AJAX action, which is accessible to ...

6.4CVSS6.1AI score0.00632EPSS
SaveExploits2References1Affected Software1
Photon
Photon
added 2022/03/03 12:0 a.m.43 views

Important Photon OS Security Update - PHSA-2022-0447

Updates of 'mariadb' packages of Photon OS have been released...

5.5CVSS1.7AI score0.00403EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.35 views

Mageia: Security Advisory (MGASA-2014-0447)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.09864EPSS
SaveExploits0References7
Packet Storm
Packet Storm
added 2022/01/06 12:0 a.m.366 views

Backdoor.Win32.SVC Directory Traversal

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/011961a42700e7385a106d362eb661c7B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.SVC Vulnerability: Directory Traversal Description: The malware listens on TCP port...

SaveExploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2019:0447-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.03382EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2015:0447-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.5AI score0.40118EPSS
SaveExploits16References6
Circl
Circl
added 2020/11/10 4:27 p.m.5 views

CVE-2020-0447

creationtimestamp| type| source ---|---|--- 2020-11-10 16:27:16+00:00| seen| https://t.me/cibsecurity/16064...

9.8CVSS8.7AI score0.00571EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/11/10 12:53 p.m.27 views

CVE-2020-0447

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617...

9.3AI score0.00571EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/10 12:53 p.m.102 views

CVE-2020-0447

CVE-2020-0447 is described in connected documents as an out-of-bounds write caused by a missing bounds check, linked to Android SoC component A-168251617. The OSV entry ASB-A-168251617 explicitly states the issue as an out-of-bounds write; other sources (NVD, Red Hat, CVE listings) reflect this d...

9.8CVSS9AI score0.00571EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2018/07/23 7:51 p.m.46 views

Cross-site request forgery in Django

Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via forged AJAX requests that leverage a "combination of browser plugins...

6.8CVSS6.3AI score0.01589EPSS
SaveExploits0References24Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.54 views

Solaris 10 (sparc) : 150400-11

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

4.9CVSS7.2AI score0.00343EPSS
SaveExploits0References2
Rows per page
Query Builder