Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:40 p.m.6 views

CVE-2021-30845

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local user may be able to read kernel memory...

5.5CVSS5.6AI score0.00053EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/29 11:43 a.m.4 views

CVE-2025-30845

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

7.5CVSS7.2AI score0.02308EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.4 views

CVE-2025-30845

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

7.5CVSS0.02308EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.10 views

CVE-2025-30845 WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

7.5CVSS0.02308EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.5 views

CVE-2025-30845 WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.1.1...

7.5CVSS7.4AI score0.02308EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/12 12:0 a.m.7 views

CVE-2024-30845

Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...

7.3AI score0.00339EPSS
Exploits1References2
CVE
CVE
added 2024/04/12 12:0 a.m.47 views

CVE-2024-30845

Rainbow external link network disk v.5.5 is affected by a Cross Site Scripting vulnerability. The issue arises in the validation component of input parameters and can allow a remote attacker to execute arbitrary code. Public documents consistently describe the vulnerability and affected version b...

6.1CVSS7.3AI score0.00339EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/04/12 12:0 a.m.9 views

CVE-2024-30845

Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...

7.2AI score0.00339EPSS
Exploits1References2
Wallarm Lab
Wallarm Lab
added 2023/06/19 3:15 p.m.35 views

GCP ESPv2 Hit with Critical API Authorization Bypass CVE-2023-30845

This post delves into a very impactful JWT Authentication Bypass vulnerability CVE-2023-30845 found in ESP-v2, an open-source service proxy that provides API management capabilities using Google Service Infrastructure. This vulnerability allows malicious API clients to bypass JWT authentication...

7.5CVSS7.3AI score0.00178EPSS
Exploits0
Circl
Circl
added 2023/04/27 12:25 a.m.1 views

CVE-2023-30845

creationtimestamp| type| source ---|---|--- 2023-04-27 00:25:23+00:00| seen| https://t.me/cibsecurity/62949 2023-06-20 05:41:47+00:00| seen| https://t.me/ctinow/119046 2023-09-23 12:27:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9072 2023-09-24 09:54:42+00:00|...

9.8CVSS8.6AI score0.00178EPSS
Exploits0References5
Cvelist
Cvelist
added 2023/04/26 8:46 p.m.17 views

CVE-2023-30845 ESPv2 vulnerable to JWT authentication bypass via `X-HTTP-Method-Override` header

ESPv2 is a service proxy that provides API management capabilities using Google Service Infrastructure. ESPv2 2.20.0 through 2.42.0 contains an authentication bypass vulnerability. API clients can craft a malicious X-HTTP-Method-Override header value to bypass JWT authentication in specific cases...

8.2CVSS9.8AI score0.00178EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/04/26 8:46 p.m.11 views

CVE-2023-30845 ESPv2 vulnerable to JWT authentication bypass via `X-HTTP-Method-Override` header

ESPv2 is a service proxy that provides API management capabilities using Google Service Infrastructure. ESPv2 2.20.0 through 2.42.0 contains an authentication bypass vulnerability. API clients can craft a malicious X-HTTP-Method-Override header value to bypass JWT authentication in specific cases...

8.2CVSS9.6AI score0.00178EPSS
Exploits0References4
Circl
Circl
added 2021/10/19 6:33 p.m.2 views

CVE-2021-30845

creationtimestamp| type| source ---|---|--- 2021-10-19 18:33:14+00:00| seen| https://t.me/cibsecurity/30782...

5.5CVSS5.5AI score0.00053EPSS
Exploits0References1
CVE
CVE
added 2021/10/19 1:11 p.m.64 views

CVE-2021-30845

CVE-2021-30845 in macOS Big Sur 11.6 relates to an out-of-bounds read that could allow a local user to read kernel memory. The Apple security content notes this as a kernel/SMB‑related issue resolved by improved bounds checking, with Big Sur 11.6 mitigating the vulnerability. Connected Apple advi...

5.5CVSS5.4AI score0.00053EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder