Lucene search
K

51 matches found

RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.4 views

CVE-2026-24553

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Retrieve Embedded Sensitive Data.This issue affects Fraud Prevention For Woocommerce: fro...

4.3CVSS5.9AI score0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:22 a.m.5 views

CVE-2023-24553

A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2023 All versions V223.0Update2. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to...

7.8CVSS7AI score0.00062EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:8 a.m.4 views

CVE-2022-24553

An issue was found in Zfaka = 1.4.5. The verification of the background file upload function check is not strict, resulting in remote command execution...

9.8CVSS7.2AI score0.01721EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:22 p.m.6 views

CVE-2021-24553

The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL injection issue. Other SQL Injections are also present in the plugin...

7.2CVSS7.4AI score0.01062EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/04/25 4:28 p.m.5 views

CVE-2025-24553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Akadrama Shipping with Venipak for WooCommerce wc-venipak-shipping allows Reflected XSS.This issue affects Shipping with Venipak for WooCommerce: from n/a through = 1.22.3...

7.1CVSS5.9AI score0.00219EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.4 views

CVE-2025-24553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Akadrama Shipping with Venipak for WooCommerce wc-venipak-shipping allows Reflected XSS.This issue affects Shipping with Venipak for WooCommerce: from n/a through = 1.22.3...

7.1CVSS0.00219EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:48 p.m.5 views

CVE-2025-24553 WordPress Shipping with Venipak for WooCommerce plugin <= 1.22.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Akadrama Shipping with Venipak for WooCommerce wc-venipak-shipping allows Reflected XSS.This issue affects Shipping with Venipak for WooCommerce: from n/a through = 1.22.3...

7.1CVSS5.9AI score0.00219EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:48 p.m.12 views

CVE-2025-24553 WordPress Shipping with Venipak for WooCommerce plugin <= 1.22.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Akadrama Shipping with Venipak for WooCommerce wc-venipak-shipping allows Reflected XSS.This issue affects Shipping with Venipak for WooCommerce: from n/a through = 1.22.3...

7.1CVSS0.00219EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:48 p.m.44 views

CVE-2025-24553

The CVE-2025-24553 entry concerns the WordPress plugin Shipping with Venipak for WooCommerce (Akadrama Shipping with Venipak for WooCommerce) and is caused by improper input neutralization during web page generation, leading to Reflected XSS. Affected versions are 1.22.3 and earlier. Multiple con...

7.1CVSS5.9AI score0.00219EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2020-24553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header. CVE-2020-24553 Note...

6.1CVSS6.6AI score0.0015EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.8 views

Azure Linux 3.0 Security Update: golang / python-tensorboard (CVE-2020-24553)

The version of golang / python-tensorboard installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-24553 advisory. - Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default f...

6.1CVSS6.8AI score0.0015EPSS
Exploits2References2
NVD
NVD
added 2024/11/22 9:15 p.m.9 views

CVE-2024-8845

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

5.5CVSS0.00098EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/22 9:5 p.m.10 views

CVE-2024-8845 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS0.00098EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 9:5 p.m.10 views

CVE-2024-8845 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS6.1AI score0.00098EPSS
Exploits0References1
CBLMariner
CBLMariner
added 2024/07/24 1:44 a.m.14 views

CVE-2020-24553 affecting package python-tensorboard for versions less than 2.16.2-2

CVE-2020-24553 affecting package python-tensorboard for versions less than 2.16.2-2. An upgraded version of the package is available that resolves this issue...

6.1CVSS6.9AI score0.0015EPSS
Exploits2
NVD
NVD
added 2024/06/24 7:15 a.m.14 views

CVE-2024-24553

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function...

7.5CVSS0.00056EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/24 7:10 a.m.21 views

CVE-2024-24553 Bludit uses SHA1 as Password Hashing Algorithm

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function...

5.9CVSS7AI score0.00056EPSS
Exploits0References1
OSV
OSV
added 2023/08/31 12:13 p.m.1 views

BELL-CVE-2020-24553 CVE-2020-24553 does not affect BellSoft software

Bulletin has no description...

6.1CVSS5.8AI score0.0015EPSS
Exploits2References1
NVD
NVD
added 2023/02/14 11:15 a.m.15 views

CVE-2023-24553

A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2023 All versions V223.0Update2. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to...

7.8CVSS7.6AI score0.00062EPSS
Exploits0References1
CVE
CVE
added 2023/02/14 10:36 a.m.54 views

CVE-2023-24553

The CVE-2023-24553 vulnerability affects Siemens Solid Edge: SE2022 (all versions before V222.0MP12) and SE2023 (all versions before V223.0Update2). The issue is an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, which could allow code executio...

7.8CVSS7.5AI score0.00062EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder