Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:36 a.m.6 views

CVE-2021-41801

The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time due to the job queue backlog...

8.8CVSS6.7AI score0.01124EPSS
Exploits0References1
Circl
Circl
added 2024/07/25 8:15 p.m.4 views

CVE-2024-41801

creationtimestamp| type| source ---|---|--- 2024-07-25 20:15:42+00:00| seen| https://t.me/cvedetector/1634...

6.1CVSS4.8AI score0.00318EPSS
Exploits0References1
Circl
Circl
added 2023/10/06 6:13 p.m.2 views

CVE-2023-41801

creationtimestamp| type| source ---|---|--- 2023-10-06 18:13:36+00:00| seen| https://t.me/cibsecurity/71722...

8.8CVSS8.6AI score0.00208EPSS
Exploits0References1
NVD
NVD
added 2023/10/06 3:15 p.m.16 views

CVE-2023-41801

Cross-Site Request Forgery CSRF vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin = 4.3 versions...

8.8CVSS6.5AI score0.00208EPSS
Exploits0References1
CVE
CVE
added 2023/10/06 2:48 p.m.49 views

CVE-2023-41801

CVE-2023-41801 : AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin versions ≤ 4.3 are affected by a Cross-Site Request Forgery (CSRF) vulnerability. The issue is mitigated by upgrading to version 4.3.1, which is listed as the fix. Public exploitation details are not provided ...

8.8CVSS7AI score0.00208EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/06 2:48 p.m.19 views

CVE-2023-41801 WordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin = 4.3 versions...

5.4CVSS9AI score0.00208EPSS
Exploits0References1
Circl
Circl
added 2023/05/10 6:28 p.m.1 views

CVE-2022-41801

creationtimestamp| type| source ---|---|--- 2023-05-10 18:28:47+00:00| seen| https://t.me/cibsecurity/63788 2025-01-24 18:05:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2969...

5.5CVSS5.5AI score0.00174EPSS
Exploits0References2
NVD
NVD
added 2023/05/10 2:15 p.m.21 views

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS5AI score0.00174EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/10 1:17 p.m.6 views

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

5CVSS5.3AI score0.00174EPSS
Exploits0References1
CVE
CVE
added 2023/05/10 1:17 p.m.35 views

CVE-2022-41801

Intel® Connect M Android application prior to version 1.82 is affected by CVE-2022-41801, described as uncontrolled resource consumption that could allow an authenticated user to cause denial of service via local access. Affected product: Intel Connect M Android app before 1.82. Root cause: uncon...

5.5CVSS5.2AI score0.00174EPSS
Exploits0References1Affected Software1
Intel
Intel
added 2023/05/09 12:0 a.m.32 views

Intel® Connect M Android App Advisory

Summary: Potential security vulnerabilities in the Intel® Connect M Android application may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41801 Description: Uncontrolled...

7.8CVSS6.1AI score0.00174EPSS
Exploits0
Mageia
Mageia
added 2021/10/13 7:39 p.m.33 views

Updated mediawiki packages fix security vulnerability

XSS vulnerability in Special:Search. CVE-2021-41798 ApiQueryBacklinks can cause a full table scan. CVE-2021-41799 Fix PoolCounter protection of Special:Contributions. CVE-2021-41800 ReplaceText continues performing actions if the user no longer has the correct permission such as by being blocked...

8.8CVSS2.6AI score0.01735EPSS
Exploits1References4
OSV
OSV
added 2021/10/11 8:15 a.m.1 views

DEBIAN-CVE-2021-41801

The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time due to the job queue backlog...

8.8CVSS6.7AI score0.01124EPSS
Exploits0References1
CVE
CVE
added 2021/10/11 7:40 a.m.80 views

CVE-2021-41801

The CVE-2021-41801 issue affects MediaWiki's ReplaceText extension (up to v1.41) and causes Incorrect Access Control: after a user is blocked following a replace job submission, the queued job may still execute later. The Debian security advisory and related Nessus entries confirm this as a vulne...

8.8CVSS8.4AI score0.01124EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/10/05 12:0 a.m.34 views

FreeBSD : mediawiki -- multiple vulnerabilities (f84ab297-2285-11ec-9e79-08002789875b)

MediaWiki reports : T285515, CVE-2021-41798 SECURITY: XSS vulnerability in Special:Search. T290379, CVE-2021-41799 SECURITY: ApiQueryBacklinks can cause a full table scan. T284419, CVE-2021-41800 SECURITY: fix PoolCounter protection of Special:Contributions. T279090, CVE-2021-41801 SECURITY:...

8.8CVSS6.2AI score0.01735EPSS
Exploits1References6
Rows per page
Query Builder