Lucene search
K

124 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:55 a.m.16 views

CVE-2025-1362

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

4.3CVSS7AI score0.00156EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-1362

Malware in sbrugna...

5CVSS6.4AI score0.0186EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/05/22 4:17 p.m.10 views

CVE-2020-1362

An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1369...

7.8CVSS6.6AI score0.02486EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 4:17 a.m.5 views

CVE-2019-1362

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1364...

7.8CVSS6.9AI score0.02685EPSS
Exploits1References1
NVD
NVD
added 2025/03/09 6:15 a.m.6 views

CVE-2025-1362

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

4.3CVSS0.00156EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/03/09 6:0 a.m.13 views

CVE-2025-1362 easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

0.00156EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/09 6:0 a.m.6 views

CVE-2025-1362 easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

4.7AI score0.00156EPSS
Exploits1References1
CVE
CVE
added 2025/03/09 6:0 a.m.55 views

CVE-2025-1362

CVE-2025-1362 affects the WordPress plugin URL Shortener | Conversion Tracking | AB Testing | WooCommerce (≤ 9.0.2). The root cause is missing CSRF checks in certain bulk actions, enabling an attacker with user login who can trick an admin into performing unintended actions (e.g., deleting custom...

4.3CVSS6.9AI score0.00156EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2025/02/27 7:25 p.m.1 views

CVE-2023-1362

creationtimestamp| type| source ---|---|--- 2025-02-27 19:25:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5758...

8.4CVSS7AI score0.01411EPSS
Exploits1References1
Circl
Circl
added 2024/02/23 12:26 p.m.4 views

CVE-2024-1362

creationtimestamp| type| source ---|---|--- 2024-02-23 12:26:20+00:00| seen| https://t.me/ctinow/191678 2024-02-23 12:26:24+00:00| seen| https://t.me/ctinow/191682 2024-03-13 17:11:56+00:00| seen| https://t.me/ctinow/206916...

4.3CVSS6.2AI score0.00212EPSS
Exploits0References3
NVD
NVD
added 2024/02/23 11:15 a.m.12 views

CVE-2024-1362

The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the cpshortcoderefresh function. This makes it possible for unauthenticated attackers to execute arbitra...

4.3CVSS4.8AI score0.00212EPSS
Exploits0References2
CVE
CVE
added 2024/02/23 11:3 a.m.82 views

CVE-2024-1362

CVE-2024-1362 affects the Colibri Page Builder plugin for WordPress. Public disclosures and vendor data indicate a Cross-Site Request Forgery (CSRF) flaw caused by missing or incorrect nonce validation in the cp_shortcode_refresh() function, enabling unauthenticated attackers to trigger shortcode...

4.3CVSS5.8AI score0.00212EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/13 12:0 a.m.8 views

CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...

8.4CVSS6.3AI score0.01411EPSS
Exploits1References2
OSV
OSV
added 2023/03/13 12:0 a.m.29 views

CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...

8.4CVSS7.3AI score0.01411EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/03/13 12:0 a.m.36 views

CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...

8.4CVSS6.5AI score0.01411EPSS
Exploits1References2
CVE
CVE
added 2023/03/13 12:0 a.m.86 views

CVE-2023-1362

CVE-2023-1362 affects unilogies/bumsys prior to v2.0.2. The root cause is improper restriction of rendered UI layers or frames, enabling clickjacking. Public references in NVD/Red Hat/Nuclei templates describe the issue and indicate upgrade to version 2.0.2 or later as the remediation. CVSS v3.1 ...

8.4CVSS6.6AI score0.01411EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/05/17 8:19 p.m.4 views

CVE-2022-1362 Cambium Networks cnMaestro OS Command Injection

The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server...

5CVSS7.5AI score0.00725EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/05/17 8:19 p.m.18 views

CVE-2022-1362 Cambium Networks cnMaestro OS Command Injection

The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server...

5CVSS7.7AI score0.00725EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2013:1219-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.65724EPSS
Exploits9References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2018:1362-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS8.3AI score0.60631EPSS
Exploits2References5
Rows per page
Query Builder