Lucene search
K

31 matches found

RedhatCVE
RedhatCVE
added 2025/07/31 10:6 a.m.3 views

CVE-2025-6730

The Bonanza – WooCommerce Free Gifts Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the xlooptincall function in all versions up to, and including, 1.0.0. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS6AI score0.00168EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/07/29 12:36 p.m.3 views

WordPress Bonanza – WooCommerce Free Gifts Lite plugin <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success vulnerability

Missing Authorization to Authenticated Subscriber+ Opt In Success vulnerability discovered by Poli in WordPress Plugin Bonanza – WooCommerce Free Gifts Lite versions = 1.0.0...

4.3CVSS6.7AI score0.00168EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/07/29 10:15 a.m.1 views

CVE-2025-6730

The Bonanza – WooCommerce Free Gifts Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the xlooptincall function in all versions up to, and including, 1.0.0. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS0.00168EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/29 9:23 a.m.1 views

CVE-2025-6730 Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success

The Bonanza – WooCommerce Free Gifts Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the xlooptincall function in all versions up to, and including, 1.0.0. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS6.1AI score0.00168EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/29 9:23 a.m.5 views

CVE-2025-6730 Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success

The Bonanza – WooCommerce Free Gifts Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the xlooptincall function in all versions up to, and including, 1.0.0. This makes it possible for authenticated attackers, with Subscriber-level...

4.3CVSS0.00168EPSS
Exploits0References2
Circl
Circl
added 2024/07/14 4:54 a.m.0 views

CVE-2024-6730

creationtimestamp| type| source ---|---|--- 2024-07-14 04:54:07+00:00| seen| https://t.me/cvedetector/814...

6.5CVSS6.2AI score0.00036EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/04/12 12:0 a.m.27 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Apache Maven Shared Utils vulnerability (USN-6730-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6730-1 advisory. It was discovered that Apache Maven Shared Utils did not handle double-quoted strings properly, allowing shell...

9.8CVSS8.3AI score0.00255EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2023/12/19 3:30 p.m.1 views

3m (=0.1.0), accord-nlp (>=0.1.0 <=0.1.8) +808 more potentially affected by CVE-2023-6730 via transformers (>=2.10.0 <=4.35.2)

transformers PYPI version =2.10.0, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.0.4, =0.0.4, =0.0.11, =0.0.13, =0.0.15, =1.2.3, =1.3.106 and more Source cves: CVE-2023-6730 Source advisory: OSV:GHSA-3863-2447-669P...

9CVSS7.2AI score0.00161EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2023/12/19 1:15 p.m.3 views

3m (=0.1.0), accord-nlp (>=0.1.0 <=0.1.8) +808 more potentially affected by CVE-2023-6730 via transformers (>=2.10.0 <=4.35.2)

transformers PYPI version =2.10.0, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.0.4, =0.0.4, =0.0.11, =0.0.13, =0.0.15, =1.2.3, =1.3.106 and more Source cves: CVE-2023-6730 Source advisory: OSV:PYSEC-2023-300...

9CVSS7.2AI score0.00161EPSS
Exploits1
Cvelist
Cvelist
added 2023/12/19 12:11 p.m.17 views

CVE-2023-6730 Deserialization of Untrusted Data in huggingface/transformers

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36...

9CVSS9AI score0.00161EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/01/12 8:2 p.m.10 views

CVE-2020-6730

...

Exploits0
CVE
CVE
added 2021/01/12 8:2 p.m.27 views

CVE-2020-6730

CVE-2020-6730 is rejected and not used as an active vulnerability entry.

6.9AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2019/12/29 12:0 a.m.2 views

Foxit Reader PhantomPDF Use After Free Code Execution (CVE-2019-6730)

A use after free vulnerability exists in Foxit Reader. This vulnerability is due to improper handling of freed objects in the JavaScript popUpMenu method. Successful exploitation could allow the attacker to execute arbitrary code in the context of the application...

6.8CVSS2.3AI score0.06202EPSS
Exploits0
NVD
NVD
added 2019/03/21 4:1 p.m.13 views

CVE-2019-6730

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the popUpMenu metho...

8.8CVSS8.8AI score0.06202EPSS
Exploits0References2
CVE
CVE
added 2019/03/19 7:56 p.m.50 views

CVE-2019-6730

CVE-2019-6730 affects Foxit Reader (and PhantomPDF in some records) via the popUpMenu method. The root cause is failure to validate the existence of an object before performing operations, leading to a use-after-free/memory misreference . This allows remote attackers to execute arbitrary code in ...

8.8CVSS8.8AI score0.06202EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2017/07/10 8:0 p.m.44 views

CVE-2017-6730

CVE-2017-6730 affects Cisco WAAS Central Manager web GUI. A processing error in RBAC allows an unauthenticated, remote attacker to download completed reports from an affected system, causing information disclosure. Affected products configured with Central Manager include Cisco WAAS/ vWAAS applia...

5.3CVSS5.3AI score0.00361EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2017/03/09 12:0 a.m.26 views

MediaWiki Multiple Vulnerabilities (Sep 2015) - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

7.5CVSS6.3AI score0.00451EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2016/11/25 4:59 p.m.19 views

CVE-2016-6730

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

9.3CVSS7.2AI score0.00035EPSS
Exploits0References2
OSV
OSV
added 2016/11/25 4:59 p.m.0 views

UBUNTU-CVE-2016-6730

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

7.3CVSS7.5AI score0.00035EPSS
Exploits0References3
CVE
CVE
added 2016/11/25 4:0 p.m.47 views

CVE-2016-6730

CVE-2016-6730 describes an elevation-of-privilege vulnerability in the NVIDIA GPU driver for Android, where a local malicious app could execute arbitrary code in the kernel. The issue is rated Critical due to potential permanent device compromise. Affected software is the NVIDIA GPU driver on And...

9.3CVSS7AI score0.00035EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder