Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.2 views

CVE-2025-32293

Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant finance allows Object Injection.This issue affects Finance Consultant: from n/a through = 2.8...

8.8CVSS7.2AI score0.00336EPSS
Exploits0References1
NVD
NVD
added 2025/05/23 1:15 p.m.2 views

CVE-2025-32293

Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant finance allows Object Injection.This issue affects Finance Consultant: from n/a through = 2.8...

8.8CVSS0.00336EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/23 12:43 p.m.12 views

CVE-2025-32293 WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant finance allows Object Injection.This issue affects Finance Consultant: from n/a through = 2.8...

8.8CVSS0.00336EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:38 a.m.4 views

CVE-2023-32293

Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WRC Pricing Tables: from n/a through 2.3.7...

5.3CVSS8.5AI score0.00182EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/05/21 12:0 a.m.3 views

WordPress Finance Consultant Theme <= 2.8 is vulnerable to PHP Object Injection

Software Finance Consultant Type Theme Vulnerable versions = 2.8 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-32293 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID f21e6a47c3bc Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

8.8CVSS6.8AI score0.00336EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/12/09 1:15 p.m.7 views

CVE-2023-32293

Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WRC Pricing Tables: from n/a through 2.3.7...

5.3CVSS0.00182EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.13 views

CVE-2023-32293 WordPress WRC Pricing Tables plugin <= 2.3.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Realwebcare WRC Pricing Tables wrc-pricing-tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WRC Pricing Tables: from n/a through = 2.3.7...

5.3CVSS6.9AI score0.00182EPSS
Exploits0References1
CVE
CVE
added 2024/12/09 11:30 a.m.44 views

CVE-2023-32293

CVE-2023-32293 relates to WordPress plugin WRC Pricing Tables (Realwebcare) up to version 2.3.7. The issue is a Missing/Broken Authorization vulnerability caused by incorrectly configured access control security levels, allowing unauthenticated users to access or manipulate data that should be re...

5.3CVSS8.5AI score0.00182EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.15 views

openSUSE: Security Advisory for connman (openSUSE-SU-2022:10076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.01941EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/09/04 12:0 a.m.10 views

WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Broken Access Control

Software WRC Pricing Tables Type Plugin Vulnerable versions = 2.3.7 Fixed in 2.3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32293 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID eca354e9c6c2 Credits Abdi Pranata Required...

6.6AI score0.00182EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2023/07/20 12:0 a.m.21 views

Ubuntu: Security Advisory (USN-6236-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.01941EPSS
Exploits5References2
Tenable Nessus
Tenable Nessus
added 2023/07/19 12:0 a.m.36 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : ConnMan vulnerabilities (USN-6236-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6236-1 advisory. It was discovered that ConnMan could be made to write out of bounds. A remote attacker could possibly use thi...

9.8CVSS7.7AI score0.01941EPSS
Exploits5References10
Debian
Debian
added 2022/10/10 6:9 p.m.40 views

[SECURITY] [DLA 3144-1] connman security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3144-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 10, 2022 https://wiki.debian.org/LTS -...

9.1CVSS9.5AI score0.00414EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2022/10/01 12:0 a.m.50 views

openSUSE 15 Security Update : connman (openSUSE-SU-2022:10134-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10134-1 advisory. - In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer...

9.8CVSS8.7AI score0.01941EPSS
Exploits0References7
Debian
Debian
added 2022/09/17 3:55 p.m.43 views

[SECURITY] [DSA 5231-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5231-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 17, 2022 https://www.debian.org/security/faq -...

9.8CVSS9.5AI score0.01941EPSS
Exploits3
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.19 views

Debian: Security Advisory (DLA-3105-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.01941EPSS
Exploits0References3
Debian
Debian
added 2022/09/13 8:33 a.m.38 views

[SECURITY] [DLA 3105-1] connman security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3105-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 13, 2022 https://wiki.debian.org/LTS -...

9.8CVSS9.7AI score0.01941EPSS
Exploits0
Circl
Circl
added 2022/08/03 6:18 p.m.0 views

CVE-2022-32293

creationtimestamp| type| source ---|---|--- 2022-08-03 18:18:40+00:00| seen| https://t.me/cibsecurity/47489...

8.1CVSS6.9AI score0.00414EPSS
Exploits0References1
OSV
OSV
added 2022/08/03 2:15 p.m.2 views

CVE-2022-32293

In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution...

8.1CVSS9.5AI score
Exploits0References5
CVE
CVE
added 2022/08/03 12:0 a.m.100 views

CVE-2022-32293

CVE-2022-32293 : In ConnMan up to 1.41, a man-in-the-middle attack against a WISPR HTTP query can trigger a use-after-free in WISPR handling, causing crashes or code execution. Affected products include ConnMan’s WISPR component; multiple advisories describe this alongside related CVEs. Remediati...

8.1CVSS8.7AI score0.00414EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder