Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 4:28 a.m.4 views

CVE-2019-13923

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway All versions. The integrated configuration web server of the affected device could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for ...

9.6CVSS6AI score0.00416EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/22 1:59 p.m.12 views

CVE-2024-13923

The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.0 via the validatefile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web...

7.6CVSS6.8AI score0.0011EPSS
Exploits0References1
Circl
Circl
added 2025/03/20 3:43 p.m.0 views

CVE-2024-13923

creationtimestamp| type| source ---|---|--- 2025-03-20 15:43:46+00:00| seen| https://t.me/cvedetector/20735...

7.6CVSS8.7AI score0.0011EPSS
Exploits0References1
NVD
NVD
added 2025/03/20 12:15 p.m.13 views

CVE-2024-13923

The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.0 via the validatefile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web...

7.6CVSS0.0011EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/20 11:11 a.m.11 views

CVE-2024-13923 Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function

The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.0 via the validatefile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web...

7.6CVSS7.3AI score0.0011EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/03/20 11:11 a.m.13 views

CVE-2024-13923 Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function

The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.0 via the validatefile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web...

7.6CVSS0.0011EPSS
Exploits0References4
CVE
CVE
added 2025/03/20 11:11 a.m.58 views

CVE-2024-13923

CVE-2024-13923 : The Order Export & Order Import for WooCommerce WordPress plugin is vulnerable to Server-Side Request Forgery via the validate_file() function in all versions up to and including 2.6.0. Exploitation requires authenticated Administrator-level access or higher and allows web reques...

7.6CVSS7.2AI score0.0011EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2023/09/14 7:15 p.m.6 views

CVE-2017-13923

Rejected reason: This candidate is unused by its CNA...

6.6AI score
Exploits0
CVE
CVE
added 2021/11/23 7:59 p.m.24 views

CVE-2018-13923

CVE-2018-13923 entry is rejected/not used and does not represent an active vulnerability.

7.3AI score
Exploits0
Cvelist
Cvelist
added 2021/11/23 7:59 p.m.6 views

CVE-2018-13923

...

Exploits0
CVE
CVE
added 2020/07/15 3:38 p.m.41 views

CVE-2020-13923

CVE-2020-13923 is an IDOR vulnerability in the order processing feature of the ERP/commerce component of Apache OFBiz, affecting versions prior to 17.12.04. The connected CNVD entry characterizes the issue as an input validation error that enables bypassing security restrictions and direct access...

5.3CVSS5.3AI score0.01577EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2019/09/13 4:38 p.m.244 views

CVE-2019-13923

The CVE-2019-13923 issue affects all versions of Siemens IE/WSN-PA Link WirelessHART Gateway. The vulnerability is Cross-Site Scripting (CWE-79) in the integrated configuration web server, allowing a malicious link to trigger client-side code execution when a logged-in user with browser access vi...

9.6CVSS7.9AI score0.00416EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.15 views

CVE-2025-13923

...

Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.9 views

CVE-2025-13923

CVE-2025-13923 entry is rejected/not used and does not represent an active vulnerability.

6.6AI score
Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.14 views

CVE-2017-13923

CVE-2017-13923 entry is rejected/not used per Initial Description.

6.8AI score
Exploits0
Rows per page
Query Builder