Lucene search
+L

10262 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:36 p.m.6 views

Malicious code in httpx-advanced (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 1:32 p.m.8 views

MAL-2024-4772 Malicious code in apicolors-advanced (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:32 p.m.3 views

Malicious code in apicolors-advanced (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:29 p.m.9 views

Malicious code in ITLec.XamаrinForms.Toоl.AdvancedProgressBar (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/06/21 12:00 a.m.13 views

PT-2024-20187 · Sony · Sony Xav-Ax5500

Name of the Vulnerable Software and Affected Versions: Sony XAV-AX5500 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. User interaction is required to exploit this issue, where the targ...

8.8CVSS7.4AI score0.00986EPSS
SaveExploits0References12
OSV
OSV
added 2024/06/20 6:15 a.m.14 views

CVE-2024-4565

The Advanced Custom Fields ACF WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without checking for the correct access...

6.5CVSS5.8AI score0.00428EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2024/06/20 12:00 a.m.14 views

WordPress plugin Advanced Custom Fields security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the WordPre...

7.5CVSS6.7AI score0.00428EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2024/06/20 12:00 a.m.10 views

PT-2024-31718 · WordPress · Advanced Custom Fields Pro

Name of the Vulnerable Software and Affected Versions: Advanced Custom Fields ACF WordPress plugin versions prior to 6.3 Advanced Custom Fields Pro WordPress plugin versions prior to 6.3 Description: The issue allows displaying custom field values for any post via shortcode without checking for t...

7.5CVSS6.7AI score0.00428EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2024/06/20 12:00 a.m.11 views

PT-2024-4399 · Unknown · Vipre Advanced Security

Name of the Vulnerable Software and Affected Versions: VIPRE Advanced Security affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute...

7.8CVSS7.4AI score0.00272EPSS
SaveExploits0References10
Zero Day Initiative
Zero Day Initiative
added 2024/06/20 12:00 a.m.19 views

VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Patch...

7.8CVSS7.5AI score0.00379EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/20 12:00 a.m.14 views

VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Anti...

7.8CVSS7.5AI score0.00272EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/20 12:00 a.m.25 views

VIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Patch...

7.8CVSS7.5AI score0.00356EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/15 12:00 a.m.11 views

PT-2024-8813 · Intel · Intel Advanced Link Analyzer Standard Edition

Name of the Vulnerable Software and Affected Versions: IntelR Advanced Link Analyzer Standard Edition versions prior to 23.1.1 Description: The issue is related to incorrect execution-assigned permissions in the IntelR Advanced Link Analyzer Standard Edition software installer. This may allow an...

6.7CVSS7.3AI score0.0015EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2024/06/14 3:19 p.m.60 views

Security Bulletin: EDB Postgres Advanced Server (EPAS)

Summary This security bulletin identifies a set of common vulnerabilities that have been addressed in EDB Postgres Advanced Server with IBM 15.4. Vulnerability Details CVEID:CVE-2023-41113 DESCRIPTION: EnterpriseDB Postgres Advanced Server could allow a remote authenticated attacker to obtain...

9.8CVSS7.5AI score0.00772EPSS
SaveExploits0Affected Software2
The Hacker News
The Hacker News
added 2024/06/14 11:01 a.m.23 views

Why Regulated Industries are Turning to Military-Grade Cyber Defenses

As cyber threats loom large and data breaches continue to pose increasingly significant risks. Organizations and industries that handle sensitive information and valuable assets make prime targets for cybercriminals seeking financial gain or strategic advantage. Which is why many highly regulated...

7.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:00 a.m.24 views

(0Day) Famatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Famatech Advanced IP Scanner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.3CVSS7.5AI score0.00414EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.13 views

PT-2024-23334

Name of the Vulnerable Software and Affected Versions Famatech Advanced IP Scanner affected versions not specified Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target...

7.3CVSS7.6AI score0.00414EPSS
SaveExploits0References5
HackRead
HackRead
added 2024/06/11 10:21 p.m.14 views

Creating Secure CRM Pipelines in Construction: Best Practices and Essential Strategies

Secure your construction company's CRM pipeline to protect client data and streamline operations. A specialized CRM enhances communication, reduces errors, and supports scalable growth with advanced security features and automation tools...

7.3AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/06/11 9:15 p.m.6 views

CVE-2024-5646

The Futurio Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘headersize’ attribute within the Advanced Text Block widget in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS6.1AI score0.00314EPSS
SaveExploits0References4
OSV
OSV
added 2024/06/11 9:15 p.m.7 views

CVE-2024-5646

The Futurio Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘headersize’ attribute within the Advanced Text Block widget in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00314EPSS
SaveExploits0References3
Rows per page
Query Builder