Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:20 a.m.7 views

CVE-2019-15771

The nd-shortcodes plugin before 6.0 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...

6.1CVSS7AI score0.00342EPSS
Exploits1References1
NVD
NVD
added 2020/09/18 2:15 p.m.12 views

CVE-2020-15771

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation...

7.5CVSS0.00107EPSS
Exploits0References2
OSV
OSV
added 2020/09/18 2:15 p.m.14 views

CVE-2020-15771

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation...

7.5CVSS7AI score0.00107EPSS
Exploits0References2
CVE
CVE
added 2020/09/18 1:22 p.m.41 views

CVE-2020-15771

CVE-2020-15771 affects Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. The vulnerability is a cross-site transmission of a cookie containing a CSRF token, allowing a remote attacker to bypass CSRF mitigation. The connected documents confirm the affected products and the CSRF ...

7.5CVSS7.5AI score0.00107EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2020/09/18 1:22 p.m.12 views

CVE-2020-15771

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation...

7.6AI score0.00107EPSS
Exploits0References2
CVE
CVE
added 2019/08/29 12:37 p.m.52 views

CVE-2019-15771

Summary: CVE-2019-15771 affects the WordPress plugin “nd-shortcodes” prior to version 6.0. A nopriv_ AJAX action in the plugin allows modification of the siteurl setting. Impact (as stated): This could enable an unauthenticated/privilege-abuse scenario by changing WordPress site URL related confi...

6.1CVSS6.3AI score0.00342EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2018/11/13 2:29 p.m.8 views

CVE-2018-15771

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI...

5.5CVSS5.3AI score0.0008EPSS
Exploits0References3
CVE
CVE
added 2018/11/13 2:0 p.m.41 views

CVE-2018-15771

Dell EMC RecoverPoint and RecoverPoint for VMs are affected by an information-disclosure vulnerability in versions before 5.1.2.1 and 5.2.0.2 respectively. The issue arises when a boxmgmt user can use the Boxmgmt CLI to determine the existence of system files, enabling local information disclosur...

5.5CVSS5.3AI score0.0008EPSS
Exploits0References3Affected Software2
Cvelist
Cvelist
added 2018/11/13 2:0 p.m.11 views

CVE-2018-15771 Dell EMC RecoverPoint Information Disclosure Vulnerability

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI...

5.3AI score0.0008EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2017/10/26 12:0 a.m.26 views

Foxit Reader Arbitrary Code Execution and Denial of Service Vulnerabilities - Windows

Foxit Reader is prone to a code execution and denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS7.8AI score0.00087EPSS
Exploits0References6
CVE
CVE
added 2017/10/22 5:0 p.m.34 views

CVE-2017-15771

Foxit Reader (Windows) is affected by buffer overflow vulnerabilities linked to specially crafted .xps files, with affected version shown as 8.3.2.25013. The connected sources (CNVD-2017-36066, OpenVAS entry, and Kaspersky advisory) describe the issue as enabling arbitrarily exploit code executio...

7.5AI score
Exploits0
Rows per page
Query Builder