Lucene search
K

22 matches found

Circl
Circl
added 2025/03/24 2:40 p.m.3 views

CVE-2025-30528

creationtimestamp| type| source ---|---|--- 2025-03-24 14:40:11+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll4yegdftk22 2025-03-24 14:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114217956754829777 2025-03-24 16:39:39+00:00| seen|...

9.3CVSS8.8AI score0.0009EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/24 1:46 p.m.10 views

CVE-2025-30528 WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through = 1.2...

9.3CVSS0.0009EPSS
Exploits0References1
CVE
CVE
added 2025/03/24 1:46 p.m.47 views

CVE-2025-30528

CVE-2025-30528 affects the WordPress plugin Awesome Logos (

9.3CVSS7.3AI score0.0009EPSS
Exploits0References1
Circl
Circl
added 2024/10/04 2:35 p.m.2 views

CVE-2021-30528

creationtimestamp| type| source ---|---|--- 2024-10-04 14:35:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4481...

8.8CVSS8AI score0.00424EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/06/04 7:19 p.m.21 views

CVE-2024-30528 WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar.This issue affects Spiffy Calendar: from n/a through 4.9.10...

5.4CVSS5.5AI score0.00077EPSS
Exploits0References1
CVE
CVE
added 2024/06/04 7:19 p.m.41 views

CVE-2024-30528

CVE-2024-30528 is a Missing Authorization (Broken Access Control) vulnerability in Spiffy Calendar (Spiffy Plugins) affecting Spiffy Calendar versions up to 4.9.10. Exploitation would require network access with low privileges and no user interaction; the CVSS base metrics indicate Confidentialit...

6.3CVSS5.9AI score0.00077EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2023/04/12 10:24 p.m.0 views

CVE-2023-30528

creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:21+00:00| seen| https://t.me/cibsecurity/61992...

6.5CVSS6.3AI score0.0025EPSS
Exploits0References1
NVD
NVD
added 2023/04/12 6:15 p.m.8 views

CVE-2023-30528

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it...

6.5CVSS6.5AI score0.0025EPSS
Exploits0References2
CVE
CVE
added 2023/04/12 5:5 p.m.51 views

CVE-2023-30528

CVE-2023-30528 affects Jenkins WSO2 Oauth Plugin 1.0 and earlier. Root cause: the WSO2 Oauth client secret is stored unencrypted in the global config.xml and the global configuration form does not mask the secret, enabling observers with Jenkins controller file-system access to view the secret. I...

6.5CVSS6.4AI score0.0025EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2022/12/01 4:45 p.m.0 views

CVE-2022-30528

creationtimestamp| type| source ---|---|--- 2022-12-01 16:45:33+00:00| seen| https://t.me/cibsecurity/53763 2025-04-24 19:06:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13322...

9.8CVSS8.7AI score0.00466EPSS
Exploits1References2
CVE
CVE
added 2022/12/01 12:0 a.m.43 views

CVE-2022-30528

CVE-2022-30528 : A SQL injection exists in the asith-eranga ISIC tour booking application. The vulnerability affects the username parameter in /system/user/modules/mod_users/controller.php, allowing an attacker to execute arbitrary commands. It is documented with a high impact (C, I, A = HIGH) an...

9.8CVSS9.9AI score0.00466EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/12/01 12:0 a.m.15 views

CVE-2022-30528

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...

10AI score0.00466EPSS
Exploits1References2
NVD
NVD
added 2021/06/07 8:15 p.m.17 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00424EPSS
Exploits1References6
CVE
CVE
added 2021/06/07 12:0 a.m.211 views

CVE-2021-30528

CVE-2021-30528 is a use-after-free vulnerability in the Chromium WebAuthentication component (Chromium/Google Chrome) on Android, before version 91.0.4472.77. The issue can allow a remote attacker who has compromised the renderer process of a user who saved a credit card in their Google account t...

8.8CVSS8.7AI score0.00424EPSS
Exploits1References6Affected Software1
Debian CVE
Debian CVE
added 2021/06/07 12:0 a.m.30 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score0.00424EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2021/06/07 12:0 a.m.46 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.00424EPSS
Exploits1
OPENSUSE Linux
OPENSUSE Linux
added 2021/06/04 12:0 a.m.39 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0840-1 Rating: important References: 1186458 Cross-References: CVE-2021-21212 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528...

8.8CVSS7.2AI score0.1671EPSS
Exploits19References1
OpenVAS
OpenVAS
added 2021/06/03 12:0 a.m.22 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0825-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.5AI score0.1671EPSS
Exploits19References4
Tenable Nessus
Tenable Nessus
added 2021/06/02 12:0 a.m.64 views

Microsoft Edge (Chromium) < 91.0.864.37 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.37. It is, therefore, affected by multiple vulnerabilities as referenced in the May 27, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

8.8CVSS7.4AI score0.1671EPSS
Exploits19References43
Microsoft CVE
Microsoft CVE
added 2021/05/27 7:0 a.m.41 views

Chromium: CVE-2021-30528 Use after free in WebAuthentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00424EPSS
Exploits1
Rows per page
Query Builder