Lucene search
+L

10707 matches found

Cvelist
Cvelist
•added 2024/04/09 6:59 p.m.•45 views

CVE-2024-2341 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the keys parameter in all versions up to, and including, 1.6.7.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

8.8CVSS8.8AI score0.00598EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/09 6:58 p.m.•20 views

CVE-2024-2342 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the customerid parameter in all versions up to, and including, 1.6.7.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...

8.8CVSS7.2AI score0.00594EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•16 views

WordPress Plugin Appointment Booking Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS9AI score0.00594EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•20 views

PT-2024-19865 · WordPress · The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin

Name of the Vulnerable Software and Affected Versions: The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress versions up to, and including, 1.6.7.7 Description: The issue is related to SQL Injection via the keys parameter due to insufficient escaping ...

8.8CVSS9.6AI score0.00598EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•7 views

CVE-2024-2341: Improper Neutralization of Special Elements used in an SQL Command

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the keys parameter in all versions up to, and including, 1.6.7.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

8.8CVSS5.7AI score0.00598EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•20 views

WordPress Plugin Appointment Booking Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS9AI score0.00598EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•18 views

PT-2024-24570 · WordPress · Embedpress

Name of the Vulnerable Software and Affected Versions: EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress versions up to, and including, 3.9.14 Description: The issue arises from insufficient...

6.4CVSS9.3AI score0.00509EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•6 views

CVE-2024-2342: Improper Neutralization of Special Elements used in an SQL Command

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the customerid parameter in all versions up to, and including, 1.6.7.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...

8.8CVSS5.7AI score0.00594EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•17 views

PT-2024-19866 · WordPress · The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin

Name of the Vulnerable Software and Affected Versions: The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress versions up to, and including, 1.6.7.7 Description: The issue allows authenticated attackers with contributor access or higher to perform SQL...

8.8CVSS9.8AI score0.00594EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•15 views

WordPress Plugin EmbedPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS7.9AI score0.00509EPSS
SaveExploits0References4
NVD
NVD
•added 2024/04/08 9:15 a.m.•33 views

CVE-2023-52546

Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS6.5AI score0.00184EPSS
SaveExploits0References2
NVD
NVD
•added 2024/04/08 9:15 a.m.•33 views

CVE-2023-52545

Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability...

7.5CVSS6.5AI score0.0035EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/04/08 9:15 a.m.•22 views

CVE-2023-52546

Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score0.00184EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/04/08 9:15 a.m.•19 views

CVE-2023-52545

Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability...

7.5CVSS5.8AI score0.0035EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/08 8:54 a.m.•39 views

CVE-2023-52546

Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.7AI score0.00184EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/08 8:54 a.m.•19 views

CVE-2023-52546

Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.8AI score0.00184EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/08 8:53 a.m.•20 views

CVE-2023-52545

Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability...

6.9AI score0.0035EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/08 12:00 a.m.•7 views

PT-2024-14617

Name of the Vulnerable Software and Affected Versions Calendar app affected versions not specified Description The issue concerns undefined permissions in the Calendar app, which could impact availability upon successful exploitation. Recommendations At the moment, there is no information about a...

7.5CVSS5.8AI score0.0035EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/04/08 12:00 a.m.•20 views

PT-2024-14618 · Unknown · Calendar App

Name of the Vulnerable Software and Affected Versions: Calendar app affected versions not specified Description: The issue concerns a vulnerability where package name verification is bypassed in the Calendar app. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS7AI score0.00184EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/04/08 12:00 a.m.•20 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to a stray...

7.5CVSS6.7AI score0.0035EPSS
SaveExploits0References3
Rows per page
Query Builder