Lucene search
+L

111 matches found

Patchstack
Patchstack
added 2024/03/12 12:0 a.m.11 views

WordPress f(x) Private Site Plugin <= 1.2.1 is vulnerable to Sensitive Data Exposure

Software fx Private Site Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0906 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 800faead5d18 Credits Francesco Carlucci Required...

5.3CVSS6.5AI score0.00468EPSS
Exploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.2 views

Malicious code in wlwz-2312-0906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813b49279dbbe0600b176e8b4079e148dacb0b0cdcb3bf7f943474b776e29db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/01/24 8:23 p.m.3 views

MAL-2024-257 Malicious code in wlwz-2312-0906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813b49279dbbe0600b176e8b4079e148dacb0b0cdcb3bf7f943474b776e29db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
CVE
CVE
added 2023/02/18 7:41 a.m.50 views

CVE-2023-0906

CVE-2023-0906 affects SourceCodester Online Pizza Ordering System 1.0. The vulnerable element is the function delete_category in the file ajax.php of the component POST Parameter Handler . The manipulation leads to missing authentication and a remote attack surface. Multiple sources classify the ...

9.8CVSS8.6AI score0.00658EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2022/03/10 6:13 p.m.6 views

CVE-2022-0906

creationtimestamp| type| source ---|---|--- 2022-03-10 18:13:10+00:00| seen| https://t.me/cibsecurity/38648...

4.8CVSS4.5AI score0.00613EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/10 3:15 p.m.6 views

CVE-2022-0906

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...

4.8CVSS5.3AI score0.00613EPSS
Exploits1References3
NVD
NVD
added 2022/03/10 3:15 p.m.30 views

CVE-2022-0906

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...

4.8CVSS0.00613EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/03/10 2:55 p.m.34 views

CVE-2022-0906 Unrestricted file upload leads to stored XSS in microweber/microweber

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...

4.3CVSS5.1AI score0.00613EPSS
Exploits1References2
CVE
CVE
added 2022/03/10 2:55 p.m.115 views

CVE-2022-0906

CVE-2022-0906 concerns Microweber (GitHub microweber/microweber). The connected sources indicate an unrestricted file upload that can lead to a stored cross-site scripting (XSS) vulnerability in versions prior to 1.1.12. The issue is reported across multiple feeds (NVD, Red Hat, OSV, CNVD, CVE li...

4.8CVSS4.5AI score0.00613EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2014:0906-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.5AI score0.02687EPSS
Exploits0References2
Circl
Circl
added 2020/04/15 6:44 p.m.7 views

CVE-2020-0906

creationtimestamp| type| source ---|---|--- 2020-04-15 18:44:17+00:00| seen| https://t.me/cibsecurity/11260...

9.3CVSS6.3AI score0.11261EPSS
Exploits0References1
NVD
NVD
added 2020/04/15 3:15 p.m.16 views

CVE-2020-0906

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979...

9.3CVSS9AI score0.11261EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.2 views

CVE-2020-0906

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979...

8.8CVSS7.9AI score0.11261EPSS
Exploits0References1
CVE
CVE
added 2020/04/15 3:12 p.m.150 views

CVE-2020-0906

Microsoft Excel contains a remote code execution vulnerability (CVE-2020-0906) where the application fails to properly handle objects in memory, allowing code to run in the attacker’s context. The Nessus updates describe Excel-specific RCEs and note that Office products were missing updates as of...

9.3CVSS8.8AI score0.11261EPSS
Exploits0References1Affected Software3
OpenVAS
OpenVAS
added 2020/04/15 12:0 a.m.40 views

Microsoft Excel 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4484285)

This host is missing an important security update according to Microsoft KB4484285 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

9.3CVSS8.3AI score0.11261EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/04/15 12:0 a.m.24 views

Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4484260)

This host is missing an important security update according to Microsoft KB4484260 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

9.3CVSS8.6AI score0.11261EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/04/15 12:0 a.m.26 views

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4484266)

This host is missing an important security update according to Microsoft KB4484266 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

9.3CVSS8.6AI score0.11261EPSS
Exploits0References1
CVE
CVE
added 2019/06/12 1:49 p.m.150 views

CVE-2019-0906

CVE-2019-0906: Jet Database Engine remote code execution in Windows. In memory handling flaw could allow arbitrary code execution when a victim opens a specially crafted file. Update from Microsoft fixes the memory handling of objects in the Jet engine to address the vulnerability; exploit detail...

9.3CVSS8AI score0.05713EPSS
Exploits0References3Affected Software8
Cvelist
Cvelist
added 2019/06/12 1:49 p.m.26 views

CVE-2019-0906 Jet Database Engine Remote Code Execution Vulnerability

...

7.8CVSS8AI score0.05713EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2019/06/12 12:0 a.m.141 views

Microsoft Windows Multiple Vulnerabilities (KB4503291)

This host is missing a critical security update according to Microsoft KB4503291 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.3CVSS7.4AI score0.48043EPSS
Exploits15References3
Rows per page
Query Builder