Lucene search
+L

58 matches found

Nuclei
Nuclei
•added 2026/10/20 2:05 a.m.•54 views

Pinterest Automatic < 4.14.4 - Unauthenticated Arbitrary Options Update

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS8.3AI score0.04491EPSS
SaveExploits1References5
osv_dla
osv_dla
•added 2025/11/25 12:00 a.m.•15 views

DLA-4380-1 cups-filters - security update

Bulletin has no description...

5.5CVSS6.1AI score0.00478EPSS
SaveExploits3
osv_echo
osv_echo
•added 2025/10/24 9:30 p.m.•9 views

ECHO-DFE5-3CD6-4380 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

7AI score0.00287EPSS
SaveExploits1References1
Circl
Circl
•added 2025/10/02 9:02 p.m.•33 views

CVE-2021-4380

creationtimestamp| type| source ---|---|--- 2025-10-02 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2ahapv7su26...

9.8CVSS8.1AI score0.04491EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2023-4380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw...

6.3CVSS6.7AI score0.00636EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/07/20 6:38 p.m.•377 views

Exploit for PHP Remote File Inclusion in Scripteo Ads_Pro

CVE-2025-4380 - Ads Pro Plugin Burpsuite Request/Response...

9.8CVSS6.6AI score0.42517EPSS
SaveExploits1
Circl
Circl
•added 2025/07/09 5:00 a.m.•26 views

CVE-2025-4380

creationtimestamp| type| source ---|---|--- 2025-07-09 05:00:00+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4380.yaml 2025-07-09 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ltkpmbglm423 2025-08-06...

9.8CVSS5.7AI score0.42517EPSS
SaveExploits1References2
NVD
NVD
•added 2025/07/02 4:15 a.m.•25 views

CVE-2025-4380

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...

9.8CVSS0.42517EPSS
SaveExploits1References2
CVE
CVE
•added 2025/07/02 3:47 a.m.•95 views

CVE-2025-4380

CVE-2025-4380 - Ads Pro Plugin

9.8CVSS8.1AI score0.42517EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/04/28 12:00 a.m.•37 views

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2023:4693)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4693 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

7.5CVSS7.3AI score0.02978EPSS
SaveExploits3References11
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•51 views

openSUSE: Security Advisory for squid (SUSE-SU-2023:4380-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.5AI score0.7855EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/04 3:15 p.m.•51 views

CVE-2023-4380

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability...

6.3CVSS6.3AI score0.00636EPSS
SaveExploits0References3
CVE
CVE
•added 2023/10/04 2:24 p.m.•185 views

CVE-2023-4380

CVE-2023-4380 affects Red Hat Ansible Automation Platform 2.4. The issue is a logic flaw in which private project credentials could be logged in plaintext during project import, exposing sensitive data and impacting confidentiality and integrity. The Red Hat advisory RHSA-2023:4693 documents fixe...

6.3CVSS6.2AI score0.00636EPSS
SaveExploits0References3Affected Software3
Cvelist
Cvelist
•added 2023/10/04 2:24 p.m.•50 views

CVE-2023-4380 Platform: token exposed at importing project

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability...

6.3CVSS6.3AI score0.00636EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/08/02 12:00 a.m.•50 views

AlmaLinux 9 : kpatch-patch (ALSA-2023:4380)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:4380 advisory. - A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The...

7.8CVSS6.7AI score0.00524EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2023/08/01 12:00 a.m.•67 views

RHEL 9 : kpatch-patch (RHSA-2023:4380)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4380 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

7.8CVSS6.6AI score0.00524EPSS
SaveExploits2References6
NVD
NVD
•added 2023/06/07 1:15 p.m.•33 views

CVE-2021-4380

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS9.5AI score0.04491EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/06/07 12:43 p.m.•73 views

CVE-2021-4380 Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS9.6AI score0.04491EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/06/07 12:43 p.m.•11 views

CVE-2021-4380 Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS7.3AI score0.04491EPSS
SaveExploits1References4
CVE
CVE
•added 2023/06/07 12:43 p.m.•142 views

CVE-2021-4380

The Pinterest Automatic plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 1.14.3 . The root cause is a lack of capability checks in the wp_pinterest_automatic_parse_request function and the process_form.php script. This flaw allows unauthenticated attac...

9.8CVSS9.2AI score0.04491EPSS
SaveIn wildExploits1References4Affected Software1
Rows per page
Query Builder