Lucene search
K

20 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-12820

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00163EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-17278

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00084EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.4 views

PT-2025-34988

Name of the Vulnerable Software and Affected Versions: Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress versions through 11.58 Description: The plugin is susceptible to unauthorized data access due to an inadequate capability check within the...

6.5CVSS6.3AI score0.00185EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 2:17 a.m.11 views

CVE-2023-51535

Cross-Site Request Forgery CSRF vulnerability in СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This issue affects Spam protection, Anti-Spam, FireWall by CleanTalk: from n/a through 6.20...

8.8CVSS8.5AI score0.0006EPSS
Exploits0References1
Prion
Prion
added 2024/02/29 5:15 a.m.24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ?leanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This issue affects Spam protection, Anti-Spam, FireWall by CleanTalk: from n/a through 6.20...

4.3CVSS7.1AI score0.00171EPSS
Exploits0References1
Prion
Prion
added 2024/01/05 10:15 a.m.12 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ?leanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This issue affects Spam protection, Anti-Spam, FireWall by CleanTalk: from n/a through 6.20...

6.8CVSS7.1AI score0.0006EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/01/05 9:57 a.m.42 views

CVE-2023-51535

Technical details (affected version ranges, root cause, exploitability, patch information) for CVE-2023-51535 are not provided in the supplied connected documents. Monitor for vendor advisories and CVE-specific updates to confirm impact and remediation.

8.8CVSS8.5AI score0.0006EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/08/23 2:15 p.m.11 views

CVE-2023-32496

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin = 7.31 versions...

5.9CVSS5.4AI score0.00067EPSS
Exploits0References1
OSV
OSV
added 2023/08/23 2:15 p.m.1 views

CVE-2023-32496

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin = 7.31 versions...

4.8CVSS7.3AI score0.00067EPSS
Exploits0References1
Prion
Prion
added 2023/08/23 2:15 p.m.17 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin = 7.31 versions...

4.3CVSS4.8AI score0.00067EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/23 1:35 p.m.10 views

CVE-2023-32496 WordPress StopBadBots Plugin <= 7.31 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin = 7.31 versions...

5.9CVSS5.6AI score0.00067EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/12/12 5:54 p.m.18 views

CVE-2022-3883 StopBadBots < 7.24 - Subscriber+ Arbitrary Plugin Installation

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 7.24 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress....

6.6AI score0.00128EPSS
Exploits2References1
Cvelist
Cvelist
added 2022/06/20 10:25 a.m.10 views

CVE-2022-1614 WP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing

The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based anti-spamming restrictions...

7.7AI score0.00245EPSS
Exploits2References1
Cvelist
Cvelist
added 2022/04/11 2:40 p.m.12 views

CVE-2022-0949 WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbotsgravafingerprint AJAX action, available to unauthenticated users,...

10AI score0.62454EPSS
Exploits2References1
Prion
Prion
added 2021/12/13 11:15 a.m.11 views

Sql injection

The WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots WordPress plugin before 6.67 does not sanitise and escape the User Agent before using it in a SQL statement to save it, leading to a SQL injection...

7.5CVSS9.6AI score0.00546EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2021/12/13 10:41 a.m.42 views

CVE-2021-24863

CVE-2021-24863 affects the WordPress plugin StopBadBots (StopBadBots WordPress plugin) prior to version 6.67. The vulnerability is a SQL injection caused by failure to sanitize and escape the User Agent before using it in a SQL statement to save it. Impact is unauthenticated access leading to dat...

9.8CVSS9.8AI score0.00546EPSS
Exploits2References1Affected Software1
CNVD
CNVD
added 2020/06/18 12:0 a.m.1 views

Cisco Email Security Appliance AsyncOS Software Input Validation Error Vulnerability (CNVD-2020-41805)

Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. An input validation error vulnerability exists in the anti-spam protection mechanism of the AsyncOS Software in the Cisco ESA, which can be exploited ...

5.8CVSS6.9AI score0.00214EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:0 a.m.1 views

The vulnerability of the anti-spam protection mechanism of the Cisco Email Security Appliance (ESA) allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of the anti-spam protection mechanism of Cisco Email Security Appliance relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected information...

5.8CVSS0.00336EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.0 views

The vulnerability of the anti-spam protection mechanism of the Cisco Email Security Appliance allows attackers to compromise the integrity of the protected information.

The vulnerability of the anti-spam protection mechanism of Cisco Email Security Appliance is related to errors in the verification of Sender Policy Framework SPF messages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information by sending...

5.3CVSS5.9AI score0.00242EPSS
Exploits0References2
CNVD
CNVD
added 2018/09/07 12:0 a.m.1 views

Cisco Email Security Appliance AsyncOS Software Access Control Error Vulnerability

Cisco Email Security Appliance ESA is a set of email security appliances from Cisco USA. The appliance provides spam protection, email encryption, data loss prevention, etc. AsyncOS Software is a set of operating systems used in it. An access control error vulnerability exists in the anti-spam...

5.3CVSS5.5AI score0.00242EPSS
Exploits0References1
Rows per page
Query Builder