108 matches found
PT-2026-31314
Name of the Vulnerable Software and Affected Versions ProSolution WP Client plugin for WordPress versions up to and including 1.9.9 Description The ProSolution WP Client plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation within the proSol...
PT-2026-28129
Name of the Vulnerable Software and Affected Versions Sonarr versions prior to 4.0.16.2942 Description Sonarr is a PVR for Usenet and BitTorrent users. A flaw exists where authentication could be bypassed in versions with authentication disabled for local addresses Authentication Required set to:...
EUVD-2013-4872
Malware in sbrugna...
EUVD-2010-3475
Malware in sbrugna...
CVE-2018-2942 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-8-openj9, openjdk-21-openj9, openjdk-11-openj9...
CVE-2025-2942
The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...
WordPress Order Delivery Date Pro for WooCommerce plugin < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure vulnerability
Unauthenticated Arbitrary Post Title Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Order Delivery Date for WP e-Commerce versions 12.6.0...
CVE-2025-2942
creationtimestamp| type| source ---|---|--- 2025-07-11 06:21:51+00:00| seen| Telegram/WLwV52FoZPANVhBPyA8MnK8Kiup-Frf40ZyX34yS0E57WvE...
CVE-2025-2942 Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...
CVE-2025-2942 Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...
CVE-2024-2942
CVE-2024-2942 affects Campcodes Online Examination System 1.0, leveraging SQL injection via the id parameter in /adminpanel/admin/query/deleteQuestionExe.php. Multiple connected sources confirm remote exploitation potential and that the vulnerability stems from unsanitized input in deleteQuestion...
CVE-2024-2942 Campcodes Online Examination System deleteQuestionExe.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. This affects an unknown part of the file /adminpanel/admin/query/deleteQuestionExe.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...
CVE-2023-2942
creationtimestamp| type| source ---|---|--- 2023-05-28 02:29:43+00:00| seen| https://t.me/cibsecurity/64744...
CVE-2023-2942
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2942
OpenEMR/OpenEMR before v7.0.1 is affected by an improper input validation flaw in the application that can impact confidentiality and integrity. Multiple sources concur on the issue, with CVSS 3.1/3.0 base scores around 8.1 (HIGH) and a network-based, low–complexity vector. The problem is tied to...
CVE-2023-2942 Improper Input Validation in openemr/openemr
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2942 Improper Input Validation in openemr/openemr
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...
K000134636: Java vulnerabilities CVE-2018-2942 and CVE-2018-2938
Security Advisory Description CVE-2018-2942 Vulnerability in the Java SE component of Oracle Java SE subcomponent: Windows DLL. Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
SUSE CVE-2011-2942
A certain Red Hat patch to the brdeliver function in net/bridge/brforward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5 allows remote attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging...
SUSE CVE-2012-2391
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2942. Reason: This candidate is a duplicate of CVE-2012-2942. Notes: All CVE users should reference CVE-2012-2942 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...