Lucene search
K

98 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.6 views

Amazon Linux 2 : libpng, --advisory ALAS2-2026-3244 (ALAS-2026-3244)

The version of libpng installed on the remote host is prior to 1.5.13-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3244 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

7.5CVSS6.4AI score0.00026EPSS
Exploits1References4
Circl
Circl
added 2026/04/09 11:30 p.m.0 views

GHSA-8F4V-XFM9-3244

creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:50+00:00| seen| Telegram/aaKaZzhZCQTbBESVtGmK3HO5aOAiXiyEGsKbx2XTc93AVKM...

4.8AI score
Exploits0
Circl
Circl
added 2026/03/04 4:21 a.m.1 views

CVE-2026-3244

creationtimestamp| type| source ---|---|--- 2026-03-04 04:21:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7gngcbpy2o...

4.8CVSS5.9AI score0.00011EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:11 a.m.3 views

CVE-2024-3244

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embedpresscalendar' shortcode in all versions up to, and including, 3.9.14...

6.4CVSS5.8AI score0.00373EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:19 a.m.4 views

CVE-2022-3244

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage to get the related nonce...

4.2CVSS6.5AI score0.0013EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:26 a.m.3 views

CVE-2010-3244

BbtsConnectionEdit.exe in Blackboard Transact Suite formerly Blackboard Commerce Suite before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml field value, which allows local users to discover the database password via a modified connection.xml...

4.6CVSS6.7AI score0.00155EPSS
Exploits0References1
NVD
NVD
added 2025/04/04 12:15 p.m.11 views

CVE-2025-3244

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to...

8.8CVSS0.00358EPSS
Exploits1References5
Circl
Circl
added 2025/04/04 11:39 a.m.5 views

CVE-2025-3244

creationtimestamp| type| source ---|---|--- 2025-04-04 11:39:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10429 2025-04-04 13:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyichld5m2f 2025-04-04 16:20:54+00:00| seen|...

8.8CVSS6.2AI score0.00358EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/04/04 11:31 a.m.13 views

CVE-2025-3244 SourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted upload

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to...

6.5CVSS7.2AI score0.00358EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/04/04 11:31 a.m.9 views

CVE-2025-3244 SourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted upload

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to...

6.5CVSS0.00358EPSS
Exploits1References5
OSV
OSV
added 2024/09/25 5:12 a.m.7 views

CGA-3244-R35F-6V38

Bulletin has no description...

7.5CVSS8.2AI score0.00306EPSS
Exploits0
Patchstack
Patchstack
added 2024/04/08 12:0 a.m.5 views

WordPress EmbedPress Plugin <= 3.9.14 is vulnerable to Cross Site Scripting (XSS)

Software EmbedPress Type Plugin Vulnerable versions = 3.9.14 Fixed in 3.9.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3244 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 41b83bc25a78 Credits wesley wcraft Required...

6.4CVSS5.8AI score0.00373EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.15 views

openSUSE: Security Advisory for openssl (SUSE-SU-2023:3244-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.5AI score0.00351EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2024/02/27 12:0 a.m.390 views

WordPress Comments Like Dislike 1.2.0 Missing Authorization

Exploit Title: POC-CVE-2023-3244 Date: 9/12/2023 Exploit Author: Diaa Hanna Software Link: download link if available Version: = 1.2.0 comments-like-dislike Tested on: 1.1.6 comments-like-dislike CVE : CVE-2023-3244 References https://nvd.nist.gov/vuln/detail/CVE-2023-3244 The Comments Like Disli...

5.3CVSS7.4AI score0.03735EPSS
Exploits4
0day.today
0day.today
added 2024/02/26 12:0 a.m.355 views

comments-like-dislike < 1.2.0 - Authenticated (Subscriber+) Plugin Setting Reset Exploit

Exploit Title: POC-CVE-2023-3244 Exploit Author: Diaa Hanna Software Link: download link if available Version: = 1.2.0 comments-like-dislike Tested on: 1.1.6 comments-like-dislike CVE : CVE-2023-3244 References https://nvd.nist.gov/vuln/detail/CVE-2023-3244 The Comments Like Dislike plugin for...

5.3CVSS7.1AI score0.03735EPSS
Exploits4
OpenVAS
OpenVAS
added 2023/12/12 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2023-3244)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.1AI score0.0001EPSS
Exploits2References2
GithubExploit
GithubExploit
added 2023/09/13 11:52 a.m.383 views

Exploit for CVE-2023-3244

proof of concept for CVE-2023-3244 Hello, this is a simple Pr...

5.3CVSS5.1AI score0.03735EPSS
Exploits4
Circl
Circl
added 2023/08/17 12:37 p.m.1 views

CVE-2023-3244

creationtimestamp| type| source ---|---|--- 2023-08-17 12:37:15+00:00| seen| https://t.me/cibsecurity/68729 2023-09-14 11:00:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9019 2023-09-15 03:37:09+00:00| published-proof-of-concept| https://t.me/crackcodes/4294...

4.3CVSS5.8AI score0.03735EPSS
Exploits4References7
Cvelist
Cvelist
added 2023/08/17 6:43 a.m.22 views

CVE-2023-3244 Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset

The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restoresettings function called via an AJAX action in versions up to, and including, 1.2.0. This makes it possible for authenticated attackers with minimal...

4.3CVSS5.2AI score0.03735EPSS
Exploits4References4
CVE
CVE
added 2023/08/17 6:43 a.m.47 views

CVE-2023-3244

CVE-2023-3244 — WordPress Comments Like Dislike vulnerability : The plugin (versions up to and including 1.1.9) exposes an unauthorized modification flaw via an AJAX action in restore_settings, due to a missing capability check. Authenticated users with minimal permissions (e.g., subscriber) can ...

4.3CVSS6.4AI score0.03735EPSS
Exploits4References4Affected Software1
Rows per page
Query Builder