Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:28 a.m.11 views

CVE-2023-49283

microsoft-graph-core the Microsoft Graph Library for PHP. The Microsoft Graph Beta PHP SDK published packages which contained test code that enabled the use of the phpInfo function from any application that could access and execute the file at...

5.4CVSS6.7AI score0.02203EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 12:53 p.m.5 views

CVE-2025-49283 WordPress Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant <= 4.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant allows Cross Site Request Forgery. This issue affects Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant: from n/a through 4.1.1...

4.3CVSS7.2AI score0.0014EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 12:53 p.m.13 views

CVE-2025-49283 WordPress Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant gdpr-compliant-recaptcha-for-all-forms allows Cross Site Request Forgery.This issue affects Anti-spam, Spam protection, ReCaptcha for all forms and...

4.3CVSS0.0014EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2022-49283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: sysfb: fix platform-device leak in error path Make sure to free the platform devic...

5.5CVSS5.6AI score0.0024EPSS
Exploits0References3
Circl
Circl
added 2025/02/26 2:23 a.m.3 views

CVE-2022-49283

creationtimestamp| type| source ---|---|--- 2025-02-26 02:23:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5436...

5.5CVSS5.9AI score0.0024EPSS
Exploits0References1
CVE
CVE
added 2025/02/26 1:56 a.m.156 views

CVE-2022-49283

Technical details for CVE-2022-49283 are not provided in the connected documents. Public details here are limited to the fix note; no affected products/versions/exploit info is given. Monitor for updates.

5.5CVSS5.4AI score0.0024EPSS
Exploits0References4Affected Software1
Circl
Circl
added 2024/10/17 11:20 p.m.2 views

CVE-2024-49283

creationtimestamp| type| source ---|---|--- 2024-10-17 23:20:37+00:00| seen| https://t.me/cvedetector/8241...

7.1CVSS4.8AI score0.00292EPSS
Exploits0References1
NVD
NVD
added 2024/10/17 8:15 p.m.19 views

CVE-2024-49283

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme CURCY woo-multi-currency allows Reflected XSS.This issue affects CURCY: from n/a through = 2.2.3...

7.1CVSS0.00292EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/10/15 12:0 a.m.14 views

WordPress CURCY Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)

Software CURCY Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49283 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a6bd022fc477 Credits Dimas Maulana Required privilege...

7.1CVSS7AI score0.00292EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/12/24 3:26 p.m.2 views

CVE-2023-49283

creationtimestamp| type| source ---|---|--- 2023-12-24 15:26:30+00:00| seen| https://t.me/ctinow/159046...

5.4CVSS5.4AI score0.02203EPSS
Exploits0References1
CVE
CVE
added 2023/12/05 10:44 p.m.111 views

CVE-2023-49283

The CVE-2023-49283 issue affects the Microsoft Graph Core PHP SDK (vendor/microsoft/microsoft-graph-core) where test code in GetPhpInfo.php calls phpinfo(), enabling information disclosure if the server misconfigures access to the vendor directory. Affected: Microsoft Graph Core PHP SDK prior to ...

5.4CVSS5.7AI score0.02203EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2023/12/05 10:44 p.m.25 views

CVE-2023-49283 Test code in published microsoft-graph-core package exposes phpinfo()

microsoft-graph-core the Microsoft Graph Library for PHP. The Microsoft Graph Beta PHP SDK published packages which contained test code that enabled the use of the phpInfo function from any application that could access and execute the file at...

5.4CVSS6.1AI score0.02203EPSS
Exploits0References5
Friends Of PHP
Friends Of PHP
added 2023/11/30 12:40 p.m.34 views

Test code in published microsoft-graph-core package exposes phpinfo()

More info at https://nvd.nist.gov/vuln/detail/CVE-2023-49283...

5.4CVSS7.2AI score0.02203EPSS
Exploits0Affected Software1
Exploit DB
Exploit DB
added 2010/07/08 12:0 a.m.51 views

BEA Weblogic - Transfer-Encoding Buffer Overflow (Metasploit)

$Id: beaweblogictransferencoding.rb 9744 2010-07-08 23:34:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

10CVSS7AI score0.56268EPSS
Exploits9
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.60 views

BEA Weblogic Transfer-Encoding Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BEA Weblogic...

10CVSS1AI score0.56268EPSS
Exploits9
Saint
Saint
added 2008/10/31 12:0 a.m.66 views

Oracle WebLogic Server Apache Connector Transfer-Encoding buffer overflow

Added: 10/31/2008 CVE: CVE-2008-4008 BID: 31683 OSVDB: 49283 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...

10CVSS7.8AI score0.56268EPSS
Exploits9
Saint
Saint
added 2008/10/31 12:0 a.m.71 views

Oracle WebLogic Server Apache Connector Transfer-Encoding buffer overflow

Added: 10/31/2008 CVE: CVE-2008-4008 BID: 31683 OSVDB: 49283 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...

10CVSS7.7AI score0.56268EPSS
Exploits9
Metasploit
Metasploit
added 2008/10/22 5:51 p.m.29 views

BEA Weblogic Transfer-Encoding Buffer Overflow

This module exploits a stack based buffer overflow in the BEA Weblogic Apache plugin. This vulnerability exists in the error reporting for unknown Transfer-Encoding headers. You may have to run this twice due to timing issues with handlers. This module requires Metasploit:...

10CVSS0.9AI score0.56268EPSS
Exploits9
Rows per page
Query Builder