Lucene search
K

7703 matches found

Patchstack
Patchstack
added 2024/11/20 9:51 a.m.3 views

WordPress SP Blog Designer plugin <= 1.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin SP Blog Designer versions = 1.0.0...

7.5CVSS7AI score0.00607EPSS
Exploits1Affected Software1
Patchstack
Patchstack
added 2024/11/20 12:0 a.m.14 views

WordPress SP Blog Designer Plugin <= 1.0.0 is vulnerable to Local File Inclusion

Software SP Blog Designer Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-52498 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 33032dc1d973 Credits João Pedro S Alcântara Kinorth...

6.5AI score0.00607EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2024/11/19 5:15 p.m.14 views

CVE-2024-51639

Cross-Site Request Forgery CSRF vulnerability in Hints Naver Blog naver-blog-api allows Stored XSS.This issue affects Naver Blog: from n/a through = 1.0...

7.1CVSS0.00194EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/19 4:32 p.m.23 views

CVE-2024-51639 WordPress Naver Blog plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hints Naver Blog naver-blog-api allows Stored XSS.This issue affects Naver Blog: from n/a through = 1.0...

7.1CVSS0.00194EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:32 p.m.23 views

CVE-2024-51639 WordPress Naver Blog plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hints Naver Blog naver-blog-api allows Stored XSS.This issue affects Naver Blog: from n/a through = 1.0...

7.1CVSS5.9AI score0.00194EPSS
Exploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.88 views

CVE-2024-51639

CVE-2024-51639 is a CSRF to Stored XSS vulnerability affecting the WordPress plugin Naver Blog (versions

7.1CVSS5.9AI score0.00194EPSS
Exploits0References1
Akamai Blog
Akamai Blog
added 2024/11/19 1:0 p.m.9 views

Everything You Need to Know About Edge Networks

...

7.3AI score
Exploits0
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.2 views

WordPress plugin Naver Blog 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...

7.1CVSS6.5AI score0.00194EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.3 views

PT-2024-34783 · Naver · Naver Blog

Name of the Vulnerable Software and Affected Versions: Naver Blog versions n/a through 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Hints Naver Blog. Recommendations: For versions n/a through 1.0, update to a version that includes a fix f...

7.1CVSS6.3AI score0.00194EPSS
Exploits0References3
NVD
NVD
added 2024/11/16 10:15 p.m.9 views

CVE-2024-52413

Deserialization of Untrusted Data vulnerability in dmcwebzone Airin Blog airin-blog allows Object Injection.This issue affects Airin Blog: from n/a through = 1.6.1...

9.8CVSS0.0071EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/16 9:33 p.m.22 views

CVE-2024-52413 WordPress Airin Blog theme <= 1.6.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in dmcwebzone Airin Blog airin-blog allows Object Injection.This issue affects Airin Blog: from n/a through = 1.6.1...

9.8CVSS0.0071EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/16 9:33 p.m.10 views

CVE-2024-52413 WordPress Airin Blog theme <= 1.6.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in DMC Airin Blog allows Object Injection.This issue affects Airin Blog: from n/a through 1.6.1...

9.8CVSS6.9AI score0.0071EPSS
Exploits0References1
CVE
CVE
added 2024/11/16 9:33 p.m.56 views

CVE-2024-52413

CVE-2024-52413 : Airin Blog WordPress theme versions

9.8CVSS7.2AI score0.0071EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/16 4:29 a.m.26 views

CVE-2024-10728 PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation

The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'installrequiredplugincallback' function in all versions up to, and including, 4.1.16. This makes it possible...

8.8CVSS0.36493EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/11/16 12:0 a.m.2 views

WordPress plugin Airin Blog 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.8CVSS8.4AI score0.0071EPSS
Exploits0References1
Akamai Blog
Akamai Blog
added 2024/11/15 2:0 p.m.8 views

Akamai’s Perspective on November’s Patch Tuesday 2024

...

7AI score
Exploits0
Schneier on Security
Schneier on Security
added 2024/11/13 12:6 p.m.5 views

Mapping License Plate Scanners in the US

DeFlock is a crowd-sourced project to map license plate scanners. It only records the fixed scanners, of course. The mobile scanners on cars are not mapped...

7.2AI score
Exploits0
Akamai Blog
Akamai Blog
added 2024/11/13 11:20 a.m.5 views

Getting Started with Akamai App Platform

Step-by-step instructions to provision a Kubernetes cluster with Akamai App Platform enabled and then build, deploy and publicly expose an application...

7AI score
Exploits0
Patchstack
Patchstack
added 2024/11/13 9:25 a.m.2 views

WordPress Airin Blog theme <= 1.6.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Theme Airin Blog versions = 1.6.1...

9.8CVSS7.3AI score0.0071EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/13 12:0 a.m.26 views

WordPress Airin Blog Theme <= 1.6.1 is vulnerable to PHP Object Injection

Software Airin Blog Type Theme Vulnerable versions = 1.6.1 Fixed in 1.6.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52413 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 5d3bd1ffdbab Credits Mika Required privilege Unauthenticated...

9.8CVSS9.6AI score0.0071EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder