Lucene search
+L

4654 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•11 views

CVE-2023-46311: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team Comments – wpDiscuz.This issue affects Comments – wpDiscuz: from n/a through 7.6.3...

6.5CVSS6.7AI score0.00522EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/20 12:00 a.m.•25 views

WordPress Plugin Comments Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS6.5AI score0.00522EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/12/20 12:00 a.m.•23 views

Anycomment.io Comments Arbitrary JavaScript Execution

The vulnerability of the comments system for the Anycomment.io website is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

8.6CVSS5.9AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/12/18 11:15 p.m.•44 views

CVE-2023-49759

Cross-Site Request Forgery CSRF vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0...

8.8CVSS0.0027EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/18 11:15 p.m.•20 views

CVE-2023-49759

Cross-Site Request Forgery CSRF vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0...

8.8CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/18 11:15 p.m.•31 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0...

6.8CVSS7.2AI score0.0027EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/18 10:19 p.m.•46 views

CVE-2023-49759 WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0...

5.4CVSS8.9AI score0.0027EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/18 10:19 p.m.•101 views

CVE-2023-49759

CVE-2023-49759 : CSRF vulnerability in gVectors Team WooDiscuz – WooCommerce Comments (WordPress plugin) affecting versions

8.8CVSS8.5AI score0.0027EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/18 12:00 a.m.•6 views

PT-2023-31329

Name of the Vulnerable Software and Affected Versions WooDiscuz – WooCommerce Comments versions through 2.3.0 Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS5.8AI score0.0027EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•7 views

CVE-2023-49759: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0...

8.8CVSS7.8AI score0.0027EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2023/12/17 1:28 p.m.•30 views

Nextcloud: see card comments after remove shared board

The vulnerability allowed unauthorized access to card comments after a shared board was removed...

4.3CVSS4.4AI score0.00381EPSS
SaveExploits0
NVD
NVD
•added 2023/12/15 2:15 p.m.•37 views

CVE-2023-50871

In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed...

4.3CVSS0.00448EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/15 2:15 p.m.•16 views

CVE-2023-50871

In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed...

4.3CVSS5.8AI score0.00448EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/15 2:15 p.m.•37 views

Authorization

In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed...

4CVSS7.2AI score0.00448EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/15 1:48 p.m.•66 views

CVE-2023-50871

The CVE covers a vulnerability in JetBrains YouTrack: prior to 2023.3.22268, an authorization check for inline comments inside thread replies could be bypassed, exposing unauthorized access to sensitive inline-comment data. Affected software is JetBrains YouTrack (pre-2023.3.22268); root cause is...

4.3CVSS4.8AI score0.00448EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/15 1:48 p.m.•38 views

CVE-2023-50871

In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed...

4.3CVSS5.1AI score0.00448EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/15 12:00 a.m.•10 views

PT-2023-31696

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2023.3.22268 Description The issue concerns a missing authorization check for inline comments inside thread replies. This could potentially allow unauthorized access or actions within the system...

4.3CVSS5.8AI score0.00448EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•10 views

CVE-2023-50871: Improper Authorization

In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed...

4.3CVSS5.5AI score0.00448EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/15 12:00 a.m.•20 views

JetBrains YouTrack Security Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2023.3.22268, which...

4.3CVSS6.7AI score0.00448EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2023/12/12 5:30 p.m.•63 views

Moderate: Red Hat Security Advisory: skopeo security update

An update for skopeo is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.5CVSS6.6AI score0.01601EPSS
SaveExploits0References6
Rows per page
Query Builder