Lucene search
+L

90 matches found

Kitploit
Kitploit
•added 2026/10/03 2:54 p.m.•11 views

jenkinsci__perfecto-plugin_CVE-2020-2261_1-17

Perfecto Jenkins Plugin Perfecto Jenkins Plugin은 빌드 환경에서 Perfecto Connect 터널 ID를 자동 생성하거나 기존 터널 ID를 재사용할 수 있는 기능을 제공합니다. 목차 Perfecto Jenkins Plugin 목차 전제 조건 1. 플러그인 활성화 단계 스크린샷 Mac Windows 고급 옵션 2. 사용법 Maven 샘플 Gradle 샘플 3. Perfecto Connect 중지 단계 고급 사용법 Perfecto Connect 파이프라인 샘플 perfecto에 앱 업로드...

8.8CVSS8AI score0.01357EPSS
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/06/03 3:32 p.m.•19 views

Security update for python-pyOpenSSL

This update for python-pyOpenSSL fixes the following issue Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15.4 zypper in -t patch...

6.8CVSS5.8AI score
SaveExploits0References4
Circl
Circl
•added 2025/08/18 9:02 p.m.•34 views

CVE-2020-2261

creationtimestamp| type| source ---|---|--- 2025-08-18 21:02:43+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcboh4mt2n...

8.8CVSS7.3AI score0.01357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:49 a.m.•20 views

CVE-2023-2261

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handleajaxcall function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers, with subscriber-level access or higher, to obtain a list of...

4.3CVSS6.4AI score0.00552EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:49 p.m.•16 views

CVE-2022-2261

The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue...

7.2CVSS6.7AI score0.01431EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:17 a.m.•19 views

CVE-2019-2261

Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

5.5CVSS7.1AI score0.00207EPSS
SaveExploits0References1
Circl
Circl
•added 2025/05/21 9:52 p.m.•23 views

CVE-2025-2261

creationtimestamp| type| source ---|---|--- 2025-05-21 21:52:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppllfmhot2t...

7CVSS7.3AI score0.0036EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/21 6:29 p.m.•71 views

CVE-2025-2261

CVE-2025-2261 is a Stored XSS in TIBCO ActiveMatrix Administrator affecting TIBCO BPM Enterprise. The vulnerability arises when user input is stored in a data store and later rendered without proper filtering, allowing malicious data to appear as part of the website and run in a user’s browser wi...

7CVSS5.7AI score0.0036EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/07/10 12:00 a.m.•38 views

openSUSE Security Advisory (SUSE-SU-2024:2261-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.00722EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/07/03 12:00 a.m.•21 views

SUSE SLES15 / openSUSE 15 Security Update : postgresql15 (SUSE-SU-2024:2261-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2261-1 advisory. - Upgrade to 15.7. bsc1224051 - CVE-2024-4317: Restrict visibility of pgstatsext and pgstatsextexprs entries to the table owne...

4.3CVSS6.7AI score0.00722EPSS
SaveExploits0References5
NVD
NVD
•added 2024/04/09 7:15 p.m.•36 views

CVE-2024-2261

The Event Tickets and Registration plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.8.2 via the RSVP functionality. This makes it possible for authenticated attackers, with contributor access and above, to extract sensitive data includin...

4.3CVSS4.3AI score0.00398EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/09 6:58 p.m.•44 views

CVE-2024-2261 Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure

The Event Tickets and Registration plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.8.2 via the RSVP functionality. This makes it possible for authenticated attackers, with contributor access and above, to extract sensitive data includin...

4.3CVSS4.7AI score0.00398EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/03/26 12:00 a.m.•23 views

WordPress Event Tickets Plugin <= 5.8.2 is vulnerable to Broken Access Control

Software Event Tickets Type Plugin Vulnerable versions = 5.8.2 Fixed in 5.8.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-2261 Patch priority Low CVSS severity Low 4.3 Developer Liquid Web / StellarWP PSID 4127cd4a2b13 Credits Tim Coen Required privile...

4.3CVSS6.6AI score0.00398EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/09/20 12:00 a.m.•49 views

Amazon Linux 2 : ghostscript (ALAS-2023-2261)

The version of ghostscript installed on the remote host is prior to 9.25-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2261 advisory. A buffer overflow vulnerability in pcxwriterle in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remo...

5.5CVSS6.7AI score0.02252EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2023/07/12 12:00 a.m.•109 views

WordPress WP Activity Log Plugin < 4.5.2 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpwhitesecurity:wpactivitylog"; ifdescription...

4.3CVSS6.9AI score0.00552EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2023/06/22 12:00 a.m.•27 views

WordPress WP Activity Log Plugin < 4.5.2 is vulnerable to Sensitive Data Exposure

Software WP Activity Log Type Plugin Vulnerable versions 4.5.2 Fixed in 4.5.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-2261 Patch priority Medium CVSS severity Medium 4.3 Developer Melapress PSID 40c85e58b056 Credits Marco Wotschka Required...

4.3CVSS6.4AI score0.00552EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/06/22 12:00 a.m.•17 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : terraform-provider-null (SUSE-SU-2023:2261-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2261-2 advisory. - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658. Tenable has extracted the...

5.9AI score
SaveExploits0References3
NVD
NVD
•added 2023/06/09 1:15 p.m.•42 views

CVE-2023-2261

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handleajaxcall function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers, with subscriber-level access or higher, to obtain a list of...

4.3CVSS4.3AI score0.00552EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/06/09 12:32 p.m.•29 views

CVE-2023-2261 WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handleajaxcall function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers, with subscriber-level access or higher, to obtain a list of...

4.3CVSS6.6AI score0.00552EPSS
SaveExploits0References3
CVE
CVE
•added 2023/06/09 12:32 p.m.•97 views

CVE-2023-2261

CVE-2023-2261 ffects the WordPress plugin WP Activity Log. The vulnerability is an authorization bypass caused by a missing capability check in the handle_ajax_call function, exposed in versions up to and including 4.5.0. This allows authenticated users with subscriber-level access or higher to e...

4.3CVSS4.6AI score0.00552EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder