Lucene search
+L

1334 matches found

Positive Technologies
Positive Technologies
added 2025/04/08 12:00 a.m.9 views

PT-2025-32996

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-1 Description: ImageMagick is software used for editing and manipulating digital images. A memory corruption issue occurs when preparing to transform from Log to sRGB colorspaces, specifically when the...

8.8CVSS6.5AI score0.04354EPSS
SaveExploits7References39
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-54205

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-12 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists in the WriteSVGImage function where an integer overflow occurs due to the use of an integer variable to...

7.5CVSS6.8AI score0.00632EPSS
SaveExploits2References44
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/09 9:16 a.m.5 views

Malicious code in com.unity.entities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 704bb1e215446716b288a6ff073ec571aaa17118a226fc27d65925981a74b53b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.11 views

Google Android 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. An attacker can exploit this...

7.8CVSS7AI score0.00076EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.12 views

Google Android 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Google Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. An attacker can exploit this...

7.5CVSS6.2AI score0.00281EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/15 8:15 p.m.6 views

CVE-2024-21259

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

7.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/15 12:00 a.m.7 views

PT-2024-6968 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 7.0.22 Oracle VM VirtualBox versions prior to 7.1.2 Description: A difficult to exploit vulnerability in Oracle VM VirtualBox allows a high privileged attacker with logon to the infrastructure where Orac...

7.5CVSS8.3AI score0.00501EPSS
SaveExploits0References38
CNNVD
CNNVD
added 2024/10/02 12:00 a.m.10 views

WordPress plugin WordPress Infinite Scroll 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.4CVSS6.1AI score0.00363EPSS
SaveExploits0References5
OSV
OSV
added 2024/09/13 7:48 p.m.31 views

RHSA-2018:1249 Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.1.2

Bulletin has no description...

8.6CVSS7.6AI score0.14703EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2024/09/05 12:00 a.m.17 views

PT-2024-6634 · WordPress · Wordpress Infinite Scroll – Ajax Load More

Name of the Vulnerable Software and Affected Versions: WordPress Infinite Scroll – Ajax Load More plugin versions up to, and including, 7.1.2 Description: The issue is related to insufficient input sanitization and output escaping, allowing for Stored Cross-Site Scripting attacks. This can be...

6.4CVSS6.2AI score0.00363EPSS
SaveExploits0References13
WPVulnDB
WPVulnDB
added 2024/05/31 12:00 a.m.23 views

WordPress Infinite Scroll – Ajax Load More < 7.1.2 - Authenticated (Contributor+) Cross-Site Scripting

Description The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ajaxloadmore shortcode in versions up to, and including, 7.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.8AI score0.0039EPSS
SaveExploits0References1Affected Software1
Fedora
Fedora
added 2024/05/26 1:29 a.m.17 views

[SECURITY] Fedora 40 Update: rust-jql-7.1.2-3.fc40

Jql - JSON Query Language - is a fast and simple command-line tool to manipulate JSON data...

7.3AI score
SaveExploits0
Patchstack
Patchstack
added 2024/05/15 6:52 a.m.11 views

WordPress Shortcodes Ultimate plugin < 7.1.2 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Shortcodes Ultimate versions 7.1.2...

6.1CVSS6.1AI score0.00441EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2024/05/15 12:00 a.m.10 views

WordPress plugin WP Shortcodes 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS6.5AI score0.00441EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2024/04/30 7:16 a.m.8 views

WordPress Shortcodes Ultimate plugin <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by stealthcopter in WordPress Plugin Shortcodes Ultimate versions = 7.1.2...

6.4CVSS5.8AI score0.00572EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/27 12:00 a.m.29 views

CVE-2022-48685

An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file cleansecbioldlogs is writable by all users and is executed as root, leading to privilege escalation...

7.7CVSS7.8AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/28 7:15 a.m.9 views

CVE-2023-52234

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Elite for WooCommerce.This issue affects Booster Elite for WooCommerce: from n/a before 7.1.2...

6.5CVSS7.3AI score0.00529EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.16 views

PT-2024-14498 · Woocommerce · Booster Elite For Woocommerce

Name of the Vulnerable Software and Affected Versions: Booster Elite for WooCommerce versions prior to 7.1.2 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not...

6.5CVSS9.3AI score0.00529EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/15 3:15 p.m.10 views

CVE-2023-50898

Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2...

8.8CVSS7.3AI score0.00433EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/15 12:00 a.m.13 views

PT-2024-13998 · Sirv · Sirv

Name of the Vulnerable Software and Affected Versions: Sirv versions through 7.1.2 Description: The issue is related to a Missing Authorization vulnerability in Sirv. This vulnerability affects Sirv from version n/a through 7.1.2. Recommendations: For versions through 7.1.2, update to a version...

8.8CVSS9.3AI score0.00433EPSS
SaveExploits0References7
Rows per page
Query Builder