Lucene search
+L

8646 matches found

RustSec
RustSec
added 2025/03/04 12:00 p.m.11 views

`openpgp-card-sequoia` is unmaintained.

The openpgp-card-sequoia crate is no longer actively maintained. You can use the openpgp-card-rpgp crate for OpenPGP card client functionality instead...

7.2AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2025/03/04 12:00 p.m.5 views

openpgp-ca (>=0.12.0-alpha.1, <=0.12.0), openpgp-ca-lib (>=0.12.0-alpha.1, <=0.13.0) +2 more potentially affected by unknown CVE via openpgp-card-sequoia (>=0.0.5, <=0.1.5)

openpgp-card-sequoia CARGO version =0.0.5, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.1.0, =0.0.1, =0.0.15 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0011...

5.5AI score
SaveExploits0
OSV
OSV
added 2025/03/04 12:00 p.m.8 views

RUSTSEC-2025-0011 `openpgp-card-sequoia` is unmaintained.

The openpgp-card-sequoia crate is no longer actively maintained. You can use the openpgp-card-rpgp crate for OpenPGP card client functionality instead...

7.2AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2009-4901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a...

2.1CVSS5.7AI score0.0037EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:00 a.m.9 views

Azure Linux 3.0 Security Update: opensc (CVE-2024-1454)

The version of opensc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1454 advisory. - The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card...

3.4CVSS5.9AI score0.00422EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:00 a.m.10 views

CBL Mariner 2.0 Security Update: opensc (CVE-2024-1454)

The version of opensc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1454 advisory. - The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card...

3.4CVSS5.9AI score0.00422EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/02 8:25 a.m.15 views

CVE-2024-8425

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and 'mwbwgmwoocommerceaddcartitemdata' functions in all versions up to, and including, 2.9.2. This makes it possible for...

9.8CVSS8AI score0.04082EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/03/01 9:23 a.m.13 views

CVE-2024-13734

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00287EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/28 9:15 a.m.11 views

CVE-2024-8425

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and 'mwbwgmwoocommerceaddcartitemdata' functions in all versions up to, and including, 2.6.0. This makes it possible for...

9.8CVSS8.1AI score0.04082EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/02/28 8:23 a.m.14 views

CVE-2024-8425 WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and 'mwbwgmwoocommerceaddcartitemdata' functions in all versions up to, and including, 2.9.2. This makes it possible for...

9.8CVSS8AI score0.04082EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/02/28 12:00 a.m.13 views

PT-2025-9074 · WordPress · Woocommerce Ultimate Gift Card

Name of the Vulnerable Software and Affected Versions: WooCommerce Ultimate Gift Card plugin for WordPress versions up to, and including, 2.6.0 Description: The issue is related to insufficient file type validation in the mwb wgm preview mail and mwb wgm woocommerce add cart item data functions,...

9.8CVSS9.7AI score0.04082EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/02/28 12:00 a.m.13 views

WordPress plugin WooCommerce Ultimate Gift Card 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.8CVSS9AI score0.04082EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2025/02/27 11:36 p.m.15 views

WordPress WooCommerce Ultimate Gift Card plugin < 2.9.3 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Tonn in WordPress Plugin WooCommerce Ultimate Gift Card versions 2.9.3...

9.8CVSS7AI score0.04082EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/27 2:35 p.m.15 views

CVE-2025-26983

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

4.3CVSS7.2AI score0.00329EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/27 2:34 p.m.9 views

CVE-2025-26952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Business Card Block business-card-block allows Stored XSS.This issue affects Business Card Block: from n/a through = 1.0.5...

6.5CVSS7.2AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/27 10:15 a.m.18 views

CVE-2024-13734

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00287EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/27 10:15 a.m.10 views

CVE-2024-13734

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score0.00287EPSS
SaveExploits0References4
CVE
CVE
added 2025/02/27 9:21 a.m.48 views

CVE-2024-13734

CVE-2024-13734 affects Card Elements for Elementor (WordPress) up to version 1.2.6. It is a stored XSS via the Profile Card widget, exploitable by authenticated users with contributor+ privileges due to insufficient input sanitization and output escaping. Impact: arbitrary script execution on pag...

6.4CVSS5.7AI score0.00287EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/02/27 9:21 a.m.21 views

CVE-2024-13734 Card Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profile Card widget in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00287EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/02/27 3:05 a.m.8 views

SUSE CVE-2022-49498

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Check for null pointer of pointer substream before dereferencing it Pointer substream is being dereferenced on the assignment of pointer card before substream is being null checked with the macro PCMRUNTIMECHECK...

7.8AI score0.00264EPSS
SaveExploits0References9
Rows per page
Query Builder