Lucene search
+L

4007 matches found

CVE
CVE
added 2024/03/28 6:34 a.m.76 views

CVE-2023-52234

CVE-2023-52234 refers to Booster Elite for WooCommerce. Patchstack confirms vulnerable versions are

6.5CVSS8.5AI score0.00529EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2024/03/27 3:24 p.m.36 views

Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite

Indian government entities and energy companies have been targeted by unknown threat actors with an aim to deliver a modified version of an open-source information stealer malware called HackBrowserData and exfiltrate sensitive information in some cases by using Slack as command-and-control C2...

7.6AI score
SaveExploits0
NVD
NVD
added 2024/03/27 3:15 a.m.23 views

CVE-2024-1532

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file...

6.8CVSS6.8AI score0.00568EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/27 1:52 a.m.13 views

CVE-2024-1532

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file...

6.8CVSS6.7AI score0.00568EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 1:52 a.m.61 views

CVE-2024-1532

Hitachi Energy RTU500 CMU Firmware is affected by CVE-2024-1532 (stb-language file handling). A specially crafted stb-language file uploaded by an authorized user could cause diagnostic texts to be displayed as empty strings. Affected firmware ranges include 12.0.1–12.0.14, 12.2.1–12.2.11, 12.4.1...

6.8CVSS6.6AI score0.00568EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/27 1:52 a.m.39 views

CVE-2024-1532

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file...

6.8CVSS6.7AI score0.00568EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/27 1:45 a.m.9 views

CVE-2024-1531

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random memory content in the RTU500 system log, if an authorized user uploads a specially crafted stb-language file...

8.2CVSS6.7AI score0.00448EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 8:15 p.m.24 views

CVE-2023-25965

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in mbbhatti Upload Resume.This issue affects Upload Resume: from n/a through 1.2.0...

5.9CVSS5.7AI score0.00543EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/26 8:5 p.m.66 views

CVE-2023-27630

CVE-2023-27630 concerns the WordPress plugin Community by PeepSo (PeepSo Core). Vulnerable until version 6.0.9.0 , the issue is an exposure of sensitive information to an unauthenticated actor (server-side information disclosure). Patchstack attributes the vulnerability to low-severity data expos...

5.3CVSS8.6AI score0.00505EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 8:5 p.m.12 views

CVE-2023-27630 WordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PeepSo Community by PeepSo.This issue affects Community by PeepSo: from n/a through 6.0.9.0...

5.3CVSS7.1AI score0.00505EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/26 8:5 p.m.26 views

CVE-2023-27630 WordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PeepSo Community by PeepSo.This issue affects Community by PeepSo: from n/a through 6.0.9.0...

5.3CVSS5.6AI score0.00505EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/26 7:54 p.m.53 views

CVE-2023-25965

CVE-2023-25965 describes exposure of sensitive information to an unauthorized actor in the WordPress plugin Upload Resume (mbbhatti), affected up to version 1.2.0. Public sources consistently state an information-disclosure flaw enabling unauthenticated access to sensitive data via the plugin’s r...

5.9CVSS8.6AI score0.00543EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.24 views

CVE-2024-21913

A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation. Once inside, the threat actor can ru...

7.8CVSS7.8AI score0.00236EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.6 views

CVE-2024-21918

A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory and triggering an access violation. Once inside, the threat actor can run harmful code on the system. This...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/26 3:56 p.m.65 views

CVE-2024-2929

Summary: CVE-2024-2929 concerns Rockwell Automation Arena Simulation software with memory corruption flaws due to buffer-related issues that can lead to unauthorized code execution if a user opens a malicious file. The vulnerability family includes multiple memory-corruption variants (out-of-boun...

7.8CVSS7AI score0.00349EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/26 3:56 p.m.14 views

CVE-2024-2929 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption

A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can run harmful code on the system. This...

7.8CVSS7.3AI score0.00349EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/26 3:56 p.m.24 views

CVE-2024-2929 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption

A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by corrupting the memory triggering an access violation. Once inside, the threat actor can run harmful code on the system. This...

7.8CVSS7.9AI score0.00349EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/26 3:48 p.m.23 views

CVE-2024-21920 Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

4.4CVSS4.8AI score0.0022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 3:48 p.m.24 views

CVE-2024-21920 Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

4.4CVSS6.7AI score0.0022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 3:46 p.m.16 views

CVE-2024-21919 Rockwell Automation Arena Simulation Vulnerable To Uninitialized Pointer

An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code to the software by leveraging the pointer after it is properly. Once inside, the threat actor can run harmful code on the system. This affects the...

7.8CVSS6.9AI score0.00291EPSS
SaveExploits0References1
Rows per page
Query Builder