Lucene search
K

12 matches found

OSV
OSV
added 2025/10/31 4:15 p.m.3 views

CVE-2025-12554

Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

9.8CVSS5.8AI score0.00301EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:31 a.m.4 views

CVE-2024-12554

The Peter’s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing nonce validation on the casregisterpost function. This makes it possible for unauthenticated attackers to blacklist emails via a forged...

5.4CVSS6.4AI score0.00201EPSS
Exploits0References1
Circl
Circl
added 2024/12/18 9:28 a.m.6 views

CVE-2024-12554

creationtimestamp| type| source ---|---|--- 2024-12-18 09:28:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113673114798725226 2024-12-18 12:01:13+00:00| seen| https://t.me/cvedetector/13177...

5.4CVSS7.3AI score0.00201EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/12/18 9:22 a.m.9 views

CVE-2024-12554 Peter’s Custom Anti-Spam <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function

The Peter’s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing nonce validation on the casregisterpost function. This makes it possible for unauthenticated attackers to blacklist emails via a forged...

5.4CVSS6.4AI score0.00201EPSS
Exploits0References4
CVE
CVE
added 2024/12/18 9:22 a.m.37 views

CVE-2024-12554

CVE-2024-12554 concerns Peter’s Custom Anti-Spam for WordPress. The issue is a Cross-Site Request Forgery due to missing nonce validation in cas_register_post(), enabling unauthenticated actors to blacklist emails by luring an admin to perform an action. The vulnerability is explicitly documented...

5.4CVSS5.2AI score0.00201EPSS
Exploits0References4
Cvelist
Cvelist
added 2019/06/05 4:23 p.m.18 views

CVE-2019-12554

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function provided by the scripting engine allows an attacker to cause a denial of service by crashing the application...

7.3AI score0.01225EPSS
Exploits1References2
CVE
CVE
added 2019/06/05 4:23 p.m.82 views

CVE-2019-12554

SweetScape 010 Editor 9.0.1 is affected by a vulnerability in the scripting engine’s WSubStr function, where improper validation of arguments allows a denial of service by crashing the application. Root cause: insufficient input/argument validation within the internal WSubStr implementation. Affe...

7.5CVSS7.3AI score0.01225EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2019/03/05 8:0 p.m.25 views

CVE-2018-12554

CVE-2018-12554 is rejected/not used and does not represent an active vulnerability entry.

7.4AI score
Exploits0
Cvelist
Cvelist
added 2019/03/05 8:0 p.m.7 views

CVE-2018-12554

...

Exploits0
CVE
CVE
added 2018/02/15 10:0 p.m.56 views

CVE-2017-12554

The CVE-2017-12554 entry concerns Hewlett Packard Enterprise Intelligent Management Center (iMC) Platform (iMC Plat) versions up to 7.3 E0504P2 and earlier. The root cause is a path validation flaw in the mibFileServlet, which handles HTTP(S) ports 8080 and 8443. This lack of proper validation al...

9CVSS9AI score0.04913EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/10/06 12:0 a.m.119 views

H3C / HPE Intelligent Management Center PLAT < 7.3 E0506P03 Multiple Vulnerabilities

The version of HPE Intelligent Management Center iMC PLAT installed on the remote host is prior to 7.3 E0506P03. It is, therefore, affected by multiple vulnerabilities that can be exploited to execute arbitrary code. Note that Intelligent Management Center iMC is an HPE product; however, it is...

10CVSS7.8AI score0.8045EPSS
Exploits5References8
CVE
CVE
added 1976/01/01 12:0 a.m.33 views

CVE-2020-12554

CVE-2020-12554 entry is rejected and not used as per initial description.

6.8AI score
Exploits0
Rows per page
Query Builder