Lucene search
K

6 matches found

Patchstack
Patchstack
added 2024/09/23 12:0 a.m.9 views

WordPress MC4WP Plugin <= 4.9.16 is vulnerable to Cross Site Scripting (XSS)

Software MC4WP Type Plugin Vulnerable versions = 4.9.16 Fixed in 4.9.17 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8680 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9afe0c8406de Credits Jorge Diaz ddiax Required...

5.5CVSS5.8AI score0.00269EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2024/08/13 12:0 a.m.11 views

WordPress Category Posts Widget Plugin < 4.9.17 is vulnerable to Cross Site Scripting (XSS)

Software Category Posts Widget Type Plugin Vulnerable versions 4.9.17 Fixed in 4.9.17 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-6158 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 321a7aaf8265 Credits Dmitrii Ignatyev Required privile...

4.8CVSS5.2AI score0.00204EPSS
Exploits1References4Affected Software1
ALT Linux
ALT Linux
added 2019/12/18 12:0 a.m.28 views

Security fix for the ALT Linux 8 package samba version 4.9.17-alt1

4.9.17-alt1 built Dec. 18, 2019 Evgeny Sinelnikov in task 242978 Dec. 13, 2019 Evgeny Sinelnikov - Update to last security winter release - Security fixes: + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server + CVE-2019-14870: DelegationNotAllowed not being...

6.4CVSS5.9AI score0.04997EPSS
Exploits0
OpenVAS
OpenVAS
added 2019/12/12 12:0 a.m.101 views

Samba Multiple Vulnerabilities (CVE-2019-14861, CVE-2019-14870)

Samba is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.4CVSS6AI score0.04997EPSS
Exploits0References2
OSV
OSV
added 2019/12/10 11:15 p.m.24 views

CVE-2019-14870

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U MS-SFU Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos...

5.4CVSS4.1AI score0.04669EPSS
Exploits0References14
wpexploit
wpexploit
added 2017/11/10 12:0 a.m.22 views

UserPro <= 4.9.17 - Authentication Bypass

The userpro plugin has the ability to bypass login authentication for the user 'admin'. If the site does not use the standard username 'admin' it is not affected. 1 - Google Dork inurl:/plugins/userpro 2 - Browse to a site that has the userpro plugin installed. 3 - Append ?upautolog=true to the...

7.5CVSS9.4AI score0.48165EPSS
Exploits3References2
Rows per page
Query Builder