Lucene search
+L

614 matches found

OSV
OSV
added 2024/10/20 9:15 a.m.11 views

CVE-2024-49332

Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/20 8:10 a.m.15 views

CVE-2024-49332 WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4...

9.8CVSS9.5AI score0.00524EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/20 8:10 a.m.60 views

CVE-2024-49332

CVE-2024-49332 is a PHP Object Injection vulnerability in WordPress Giveaway Boost plugin (

9.8CVSS5.9AI score0.00524EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/20 8:10 a.m.32 views

CVE-2024-49332 WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in giveawayboost Giveaway Boost giveaway-boost allows Object Injection.This issue affects Giveaway Boost: from n/a through = 2.1.4...

9.8CVSS0.00524EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/20 12:00 a.m.7 views

WordPress plugin Giveaway Boost 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.7AI score0.00524EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/20 12:00 a.m.13 views

PT-2024-33474 · Unknown · Giveaway Boost

Name of the Vulnerable Software and Affected Versions: Giveaway Boost versions n/a through 2.1.4 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This is a security problem where an attacker can inject malicious objects into the system...

9.8CVSS6.9AI score0.00524EPSS
SaveExploits0References9
Patchstack
Patchstack
added 2024/10/17 11:41 a.m.8 views

WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Giveaway Boost versions = 2.1.4...

9.8CVSS7.3AI score0.00524EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/17 12:00 a.m.23 views

WordPress Giveaway Boost Plugin <= 2.1.4 is vulnerable to PHP Object Injection

Software Giveaway Boost Type Plugin Vulnerable versions = 2.1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-49332 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID dc16e9530c12 Credits Mika Required privilege Unauthenticated...

9.8CVSS6.9AI score0.00524EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/11 12:00 a.m.18 views

SUSE SLED15: libreoffice / libreoffice-base / libreoffice-base-drivers-firebird / etc (SUSE-SU-2024:3577-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3577-1 advisory. libreoffice was updated to version 24.8.1.2 jscPED-10362: - Release notes:...

10CVSS7.3AI score0.00428EPSS
SaveExploits0References7
OSV
OSV
added 2024/10/10 4:36 a.m.17 views

SUSE-SU-2024:3577-1 Security update for libreoffice

This update for libreofficefixes the following issues: libreoffice was updated to version 24.8.1.2 jscPED-10362: - Release notes: https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and...

10CVSS7.7AI score0.00428EPSS
SaveExploits0References6
OSV
OSV
added 2024/10/10 4:15 a.m.10 views

SUSE-SU-2024:3576-1 Security update for libreoffice

This update for libreoffice fixes the following issues: libreoffice was updated to version 24.8.1.2 jscPED-10362: - Release notes: https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and...

10CVSS7.7AI score0.00428EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2024/10/10 4:15 a.m.3 views

Security update for libreoffice

This update for libreoffice fixes the following issues: libreoffice was updated to version 24.8.1.2 jscPED-10362: Release notes: https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and...

8.1CVSS7.5AI score0.00428EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2024/09/27 12:00 a.m.6 views

Slackware Linux 15.0 / current boost Vulnerability (SSA:2024-270-01)

The version of boost installed on the remote host is prior to 1.78.0 / 1.86.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-270-01 advisory. New boost packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

5.6AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/09/27 12:00 a.m.5 views

Slackware: Security Advisory (SSA:2024-270-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Slackware Linux
Slackware Linux
added 2024/09/26 6:41 p.m.13 views

[slackware-security] boost

New boost packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/boost-1.78.0-i586-3slack15.0.txz: Rebuilt. Get rid of hardcoded temporary paths in the cmake files. Since these paths point to a locati...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/09/15 8:41 p.m.11 views

RHSA-2013:0668 Red Hat Security Advisory: boost security update

Bulletin has no description...

5CVSS7.1AI score0.03889EPSS
SaveExploits1References7
OSV
OSV
added 2024/09/15 7:31 p.m.15 views

RHSA-2012:0305 Red Hat Security Advisory: boost security and bug fix update

Bulletin has no description...

5CVSS6AI score0.02686EPSS
SaveExploits1References13
OSV
OSV
added 2024/09/02 8:09 a.m.26 views

OPENSUSE-SU-2024:0274-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.27: CVE-2024-34340: Authentication Bypass when using using older password hashes boo1224240 CVE-2024-25641: RCE vulnerability when importing packages boo1224229 CVE-2024-31459: RCE vulnerability when plugins include files...

9.1CVSS7.9AI score0.86303EPSS
SaveExploits26References21
OSV
OSV
added 2024/08/16 12:08 a.m.10 views

OSV-2024-914 UNKNOWN READ in boost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851 Crash type: UNKNOWN READ Crash state: boost::redetail500::basicregexformatter boost::red...

7.2AI score
SaveExploits0References1
CVE
CVE
added 2024/07/12 12:32 p.m.134 views

CVE-2024-40975

CVE-2024-40975 affects the Linux kernel in platform/x86/x86-android-tablets code. The issue arises when a device is unregistered while consumers still hold references, with the regulator subsystem given as a concrete example. If a regulator is unregistered prematurely, a WARN() can be triggered (...

5.5CVSS6.6AI score0.00288EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder