Lucene search
+L

50 matches found

CNNVD
CNNVD
added 2025/10/22 12:00 a.m.7 views

WordPress plugin Simple Business Data 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.0018EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/10/21 11:53 p.m.11 views

WordPress Simple Business Data plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Simple Business Data versions = 1.0.1...

6.4CVSS5.7AI score0.0018EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/23 10:39 a.m.4 views

CVE-2024-4598 Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator

An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator. Authenticated users may be able to view unintended business data from other mediation contexts because the internal state is not properly isolated or cleared between...

6.5CVSS5.8AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/23 12:00 a.m.10 views

PT-2025-39161

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description An information disclosure issue exists due to an improper implementation of the enrich mediator. Authenticated users may be able to view unintended business data from other mediation...

6.5CVSS6AI score0.0032EPSS
SaveExploits0References6
Microsoft KB
Microsoft KB
added 2025/08/12 7:00 a.m.18 views

Description of the security update for SharePoint Server 2019: August 12, 2025 (KB5002769)

None None...

8.8CVSS6.8AI score0.19986EPSS
SaveExploits0
HackRead
HackRead
added 2025/06/26 7:51 a.m.8 views

Protecting Business Data From Unauthorized Encryption Threats

Your business operates in an online environment where unauthorized encryption of data isn't just possible, it's probable. The…...

7.3AI score
SaveExploits0
HackRead
HackRead
added 2025/05/07 5:04 p.m.20 views

ClickFunnels Investigates Breach After Hackers Leak Business Data

ClickFunnels is investigating a data breach after hackers leaked detailed business data, including emails, phone numbers, and company…...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/08/02 10:52 a.m.72 views

Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal

Enterprise Resource Planning ERP Software is at the heart of many enterprising supporting human resources, accounting, shipping, and manufacturing. These systems can become very complex and difficult to maintain. They are often highly customized, which can make patching difficult. However, critic...

9.8CVSS7.7AI score0.99442EPSS
SaveExploits12
HackRead
HackRead
added 2024/04/02 10:33 a.m.14 views

Top 3 Cybersecurity Tools to Protect Business Data

By Uzair Amir Discover the top three cybersecurity tools designed to safeguard your business data from online threats and breaches, ensuring secure data transfer. This is a post from HackRead.com Read the original post: Top 3 Cybersecurity Tools to Protect Business Data...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/08/25 11:49 a.m.36 views

Learn How Your Business Data Can Amplify Your AI/ML Threat Detection Capabilities

In today's digital landscape, your business data is more than just numbers—it's a powerhouse. Imagine leveraging this data not only for profit but also for enhanced AI and Machine Learning ML threat detection. For companies like Comcast, this isn't a dream. It's reality. Your business comprehends...

5.9AI score
SaveExploits0
CNNVD
CNNVD
added 2023/04/25 12:00 a.m.16 views

Odoo 安全漏洞

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. An access control...

5.3CVSS6.7AI score0.00465EPSS
SaveExploits0References3
Huntr
Huntr
added 2022/12/18 3:29 a.m.18 views

Multiple Blind SQL Injection Vulnerabilities in Reports

Description SQL injection typically allows an attacker to extract the entire database from the vulnerable website, including user information, encrypted passwords, and business data. This can subsequently lead to mass compromise of user accounts, data being encrypted and held to ransom, or stolen...

7.8AI score
SaveExploits0References1
CNVD
CNVD
added 2022/07/18 12:00 a.m.70 views

SAP Business One License service API授权问题漏洞

SAP Business One License service API is a service of SAP Germany. It provides a unified service endpoint that can be used to access business data from source systems outside of the SAP Business One system via API calls.The SAP Business One License service API contains an authorization issue...

7.5CVSS1.2AI score0.00965EPSS
SaveExploits0References1
HackRead
HackRead
added 2022/02/10 8:47 p.m.20 views

Ways to Keep Your Business Data Secure From Cyber Attacks

By Owais Sultan Many business owners believe they are not at risk from cyber attacks just because their company is not… This is a post from HackRead.com Read the original post: Ways to Keep Your Business Data Secure From Cyber Attacks...

4.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/11/10 4:15 p.m.7 views

CVE-2021-40502

SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Authenticated attackers will be able to access and edit data from b2b units they do not belong to...

8.8CVSS7.1AI score0.00828EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/31 12:00 a.m.8 views

The vulnerability in the Skype for Business app for the Microsoft Edge browser allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Skype for Business app for the Microsoft Edge browser is related to the lack of protection for business-related data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by clicking on a specially created link...

4.3CVSS5.8AI score0.04216EPSS
SaveExploits0References2
HackRead
HackRead
added 2019/12/15 11:54 p.m.48 views

How safe is business data stored in third-party supplier websites?

By Uzair Amir For any modern business, the data that they hold is among their most valuable assets. Whether it is data about customers or about the business itself... This is a post from HackRead.com Read the original post: How safe is business data stored in third-party supplier websites?...

2.2AI score
SaveExploits0
Hacker One
Hacker One
added 2019/12/12 9:36 a.m.95 views

Mail.ru: Public available Sensitive Information about drivers

Domain, site, application -- API for client app Citimobil https://c-api.city-mobil.ru/ Version 4.33.0 and others Testing environment -- Device on any OS with internet connection Any software to send https requests Steps to reproduce -- Send POST request to url...

SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:00 a.m.36 views

Microsoft SharePoint Business Data Connectivity Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the Business Data Connectivity Service. A crafted request can trigger the deserializati...

8.8CVSS4.6AI score0.11659EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:00 a.m.31 views

Microsoft SharePoint Business Data Connectivity Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication as a high-privileged user is required to exploit this vulnerability. The specific flaw exists within the Business Data Connectivity Service. The issue results fro...

7.2CVSS4.2AI score0.08328EPSS
SaveExploits0References1
Rows per page
Query Builder