Lucene search
+L

5084 matches found

UbuntuCve
UbuntuCve
•added 2024/10/24 9:15 p.m.•16 views

CVE-2024-48423

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

8.4CVSS6.8AI score0.00255EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/24 8:32 a.m.•40 views

CVE-2024-8717 PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip <= 2.3.32 - Reflected Cross-Site Scripting

The PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pdfsource' parameter in all versions up to, and including, 2.3.32 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS0.00458EPSS
SaveExploits0References3
NVD
NVD
•added 2024/10/23 4:15 p.m.•54 views

CVE-2024-49657

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

7.7CVSS0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/23 3:39 p.m.•30 views

CVE-2024-49652 WordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Upload a Web Shell to a Web Server.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

9.9CVSS5.9AI score0.00522EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/23 3:39 p.m.•70 views

CVE-2024-49652

CVE-2024-49652 concerns the WordPress plugin ReneeCussack 3D Work In Progress (versions n/a through 1.0.3). The vulnerability is an Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a web shell to the web server. According to Patchstack, this is a high-severity issue...

9.9CVSS5.9AI score0.00522EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/23 3:12 p.m.•56 views

CVE-2024-49657 WordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Deletion vulnerability

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

7.7CVSS0.00403EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/23 3:12 p.m.•71 views

CVE-2024-49657

CVE-2024-49657 : WordPress plugin “3D Work In Progress” (RenéeCussack)

7.7CVSS5.9AI score0.00403EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/10/23 12:00 a.m.•17 views

Adobe Substance 3D Sampler Null Pointer Dereference Vulnerability

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photographic captures and scanned images into 3D texture and material assets. A null pointer dereference vulnerability exists in Adobe Substance 3D Sampler 4.5 and earlier...

5.5CVSS6.6AI score0.00206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•3 views

PT-2024-33608

Name of the Vulnerable Software and Affected Versions ReneeCussack 3D Work In Progress versions 1.0.3 and earlier Description The issue is related to missing authorization, allowing exploitation due to incorrectly configured access control security levels. Recommendations For versions 1.0.3 and...

7.7CVSS5.8AI score0.00403EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•4 views

CVE-2024-49652: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Upload a Web Shell to a Web Server.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

9.9CVSS5.8AI score0.00522EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•5 views

CVE-2024-49657: Missing Authorization

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

7.7CVSS5.9AI score0.00403EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/10/23 12:00 a.m.•13 views

The vulnerability of the Substance 3D Stager software lies in its susceptibility to overflowing buffer spaces, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of the buffer based on a queue. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.3AI score0.0034EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/23 12:00 a.m.•15 views

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00281EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/10/21 7:40 a.m.•12 views

WordPress CWD 3D Image Gallery plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin CWD 3D Image Gallery versions = 1.0...

7.1CVSS6.1AI score0.00306EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/10/21 12:00 a.m.•31 views

WordPress 3D Work In Progress Plugin <= 1.0.3 is vulnerable to Arbitrary File Deletion

Software 3D Work In Progress Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Deletion CVE CVE-2024-49657 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 209728d5f5a9 Credits stealthcopter Required privilege...

7.7CVSS6.8AI score0.00403EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/10/21 12:00 a.m.•29 views

WordPress CWD 3D Image Gallery Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software CWD 3D Image Gallery Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49632 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ff9d4857fb07 Credits João Pedro S Alcântara Kinorth...

7.1CVSS6.6AI score0.00306EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/10/21 12:00 a.m.•20 views

WordPress 3D Work In Progress Plugin <= 1.0.3 is vulnerable to Arbitrary File Upload

Software 3D Work In Progress Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49652 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 22382aa9215e Credits stealthcopter Required privilege...

9.9CVSS6.8AI score0.00522EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/10/16 2:15 p.m.•27 views

CVE-2024-48034

Unrestricted Upload of File with Dangerous Type vulnerability in fliperrr Creates 3D Flipbook, PDF Flipbook create-flipbook-from-pdf allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through = 1.2...

9.9CVSS0.00492EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/16 1:43 p.m.•72 views

CVE-2024-48034

CVE-2024-48034: WordPress plugin Creates 3D Flipbook, PDF Flipbook (versions &lt;= 1.2) allows unrestricted upload of files with dangerous types, enabling potential web shell upload to the server. Affected: Creates 3D Flipbook, PDF Flipbook

9.9CVSS5.9AI score0.00492EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/16 12:00 a.m.•7 views

CVE-2024-48034: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in fliperrr Creates 3D Flipbook, PDF Flipbook create-flipbook-from-pdf allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through = 1.2...

9.9CVSS5.8AI score0.00492EPSS
SaveExploits0References1
Rows per page
Query Builder