Lucene search
+L

1491 matches found

osv_cve
osv_cve
•added 2023/10/25 5:19 p.m.•33 views

CVE-2023-37911 org.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 9.4-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, when a document has been deleted and re-created, it is possible for users with view right on the re-created document b...

6.5CVSS6.2AI score0.00935EPSS
SaveExploits1References8
Fedora
Fedora
•added 2023/10/23 1:25 a.m.•50 views

[SECURITY] Fedora 37 Update: python-django-4.1.12-1.fc37

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

7.5CVSS6.6AI score0.02978EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2023/10/16 3:55 p.m.•415 views

Exploit for Out-of-bounds Write in Haxx Libcurl

CVE-2023-38545: Curl Vulnerability Proof of Concept This repos...

9.8CVSS8.1AI score0.78689EPSS
SaveExploits7
Fedora
Fedora
•added 2023/10/15 1:44 a.m.•60 views

[SECURITY] Fedora 38 Update: python-django-4.1.12-1.fc38

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

7.5CVSS6.6AI score0.02978EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/10/10 5:42 p.m.•62 views

CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

6.7AI score0.02515EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/10/10 5:42 p.m.•39 views

CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts of the recycling...

6.6AI score0.02515EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2023/10/02 3:17 p.m.•18 views

aqua-clean-2000.at Cross Site Scripting vulnerability OBB-3719980

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/07/14 10:01 a.m.•13 views

clean-teeth.ch Cross Site Scripting vulnerability OBB-3516056

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
NVD
NVD
•added 2023/05/26 3:15 p.m.•32 views

CVE-2023-25034

Cross-Site Request Forgery CSRF vulnerability in BoLiQuan WP Clean Up plugin = 1.2.3 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/05/26 3:15 p.m.•14 views

CVE-2023-25034

Cross-Site Request Forgery CSRF vulnerability in BoLiQuan WP Clean Up plugin = 1.2.3 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/26 3:15 p.m.•29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in BoLiQuan WP Clean Up plugin = 1.2.3 versions...

6.8CVSS8.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/05/26 2:14 p.m.•58 views

CVE-2023-25034

CVE-2023-25034: CSRF vulnerability in BoLiQuan WP Clean Up plugin

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/26 2:14 p.m.•39 views

CVE-2023-25034 WordPress WP Clean Up Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BoLiQuan WP Clean Up plugin = 1.2.3 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/05/26 12:00 a.m.•12 views

WordPress plugin WP Clean Up has a vulnerability related to cross-site request forgeing.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.7AI score0.00256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/26 12:00 a.m.•7 views

CVE-2023-25034: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BoLiQuan WP Clean Up plugin = 1.2.3 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/05/17 12:00 a.m.•45 views

Fedora: Security Advisory for python-django3 (FEDORA-2023-8f9d949dbc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01391EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2023/05/13 1:43 a.m.•12 views

clean-teeth.ch Cross Site Scripting vulnerability OBB-3328794

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Citrix
Citrix
•added 2023/05/11 12:00 a.m.•27 views

Driver Disk for Cisco fnic 2.0.0.89-243.0 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Cisco's fnic driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- fnic| FC and NVME HBA Driver/| 2.0.0.89-243.0 Issues resolved in this driv...

7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/05/06 11:24 a.m.•42 views

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

An advanced persistent threat APT actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism. "The attack is based on a classic side-loading attack, consisting of a clean application, a malicious loader, and an...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/05/06 11:24 a.m.•10 views

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

An advanced persistent threat APT actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism. "The attack is based on a classic side-loading attack, consisting of a clean application, a malicious loader, and an...

6.6AI score
SaveExploits0
Rows per page
Query Builder