Lucene search
+L

77 matches found

Vulnrichment
Vulnrichment
added 2023/03/10 7:7 p.m.9 views

CVE-2023-1346 RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_page_cache'

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clearpagecache function. This makes it possible for unauthenticated attackers to clear the...

4.3CVSS6.6AI score0.00315EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/10 7:7 p.m.71 views

CVE-2023-1346

CVE-2023-1346 affects the WordPress plugin RapidLoad Power-Up for Autoptimize (versions up to and including 1.7.1). The issue is a CSRF in the clear_page_cache function due to missing or incorrect nonce validation, allowing unauthenticated attackers to clear the plugin cache if a site admin is tr...

4.3CVSS5.1AI score0.00315EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2022/04/13 6:10 p.m.69 views

CVE-2022-1346

CVE-2022-1346 affects Organizr (causefx/organizr) prior to version 2.1.1810, due to multiple stored XSS in bookmark-related fields (Categories, Bookmark Tabs, Bookmark Categories). The underlying issue is lack of proper input validation/output encoding in these fields, enabling attackers to injec...

9CVSS9AI score0.01024EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/04/13 6:10 p.m.21 views

CVE-2022-1346 Multiple Stored XSS in causefx/organizr

Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse...

9CVSS8.9AI score0.01024EPSS
SaveExploits1References2
Circl
Circl
added 2021/02/04 8:34 p.m.8 views

CVE-2021-1346

creationtimestamp| type| source ---|---|--- 2021-02-04 20:34:25+00:00| seen| https://t.me/cibsecurity/23075...

9CVSS7AI score0.02753EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/04 4:40 p.m.62 views

CVE-2021-1346

Cisco Small Business RV Series Routers (RV016, RV042, RV042G, RV082, RV320, RV325) are affected by CVE-2021-1346 due to improper validation of user-supplied input in the web-based management interface. An authenticated attacker with valid administrator credentials could send crafted HTTP requests...

9CVSS7.3AI score0.02753EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/07/14 10:54 p.m.151 views

CVE-2020-1346

Technical details about CVE-2020-1346 are not publicly provided in the connected documents. Monitor for updates from official advisories and third-party analyses.

7.8CVSS7.6AI score0.00738EPSS
SaveExploits0References1Affected Software8
Microsoft KB
Microsoft KB
added 2020/07/14 7:0 a.m.244 views

Servicing stack update for Windows 10, version 1607: July 14, 2020

None None...

7.8CVSS7AI score0.00738EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/07/14 7:0 a.m.80 views

Servicing stack update for Windows Server 2008 SP2: July 14, 2020

Servicing stack update for Windows Server 2008 SP2: July 14, 2020 Applies to Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Server Core installation Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for...

7.8CVSS7.4AI score0.00738EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/07/14 7:0 a.m.423 views

Servicing stack update for Windows 10, version 1809: July 14, 2020

None None...

7.8CVSS7AI score0.00738EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/07/14 12:0 a.m.62 views

KB4565489: Windows 10 Version 1803 July 2020 Security Update

The remote Windows host is missing security update 4565489. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...

9.3CVSS7.9AI score0.93966EPSS
SaveExploits10References84
Tenable Nessus
Tenable Nessus
added 2020/07/14 12:0 a.m.85 views

KB4565483: Windows 10 Version 1903 and Windows 10 Version 1909 July 2020 Security Update

The remote Windows host is missing security update 4565483 or 4565554. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this...

9.3CVSS7.9AI score0.93966EPSS
SaveExploits10References90
Tenable Nessus
Tenable Nessus
added 2020/04/07 12:0 a.m.49 views

RHEL 7 : python (RHSA-2020:1346)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1346 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

9.1CVSS6.8AI score0.12261EPSS
SaveExploits4References15
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.56 views

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2018-1346)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS6.7AI score0.0401EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/11/07 12:0 a.m.39 views

Amazon Linux 2 : dhcp (ALAS-2019-1346)

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All...

7.5CVSS6.5AI score0.08813EPSS
SaveExploits1References2
Prion
Prion
added 2019/10/10 2:15 p.m.24 views

Denial of service

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347...

7.1CVSS6.3AI score0.13988EPSS
SaveExploits6References2Affected Software3
CVE
CVE
added 2019/10/10 1:28 p.m.125 views

CVE-2019-1346

Technical details for CVE-2019-1346 are not provided in the connected documents. The materials reference a Windows memory-handling DoS but do not specify affected components, versions, impact, or remediation. Monitor for updates.

7.1CVSS7.4AI score0.10221EPSS
SaveExploits2References2Affected Software8
CVE
CVE
added 2019/10/10 1:28 p.m.140 views

CVE-2019-1347

Technical details about CVE-2019-1347 are not provided in the connected documents. Public details (affected products, root cause, impact, or fixes) are not disclosed here. Monitor for updates and refer to the initial CVE entry for any forthcoming specifics.

7.1CVSS7.4AI score0.13988EPSS
SaveExploits2References2Affected Software6
OpenVAS
OpenVAS
added 2019/10/09 12:0 a.m.79 views

Microsoft Windows Multiple Vulnerabilities (KB4519976)

This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS6.9AI score0.76451EPSS
SaveExploits8References3
Kaspersky
Kaspersky
added 2019/10/08 12:0 a.m.69 views

KLA11872 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...

9.9CVSS9.8AI score0.76451EPSS
SaveExploits12References45
Rows per page
Query Builder