Lucene search
+L

8590 matches found

CNNVD
CNNVD
added 2024/06/13 12:0 a.m.6 views

Adobe Commerce 代码问题漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from a server-side request forgery vulnerability that can be exploited by an attacker to send a crafted request to the server,...

8.8CVSS7.3AI score0.01123EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.5 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An authorization issue vulnerability exists in Adobe Commerce, which could be exploited by an attacker to gain unauthorized access or perform an action...

5.3CVSS6.8AI score0.00846EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.7 views

Adobe Commerce 代码问题漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A file upload vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause arbitrary code execution by uploading a malicious...

7.2CVSS7.8AI score0.01386EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.8 views

Adobe Commerce 授权问题漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an authorization issue vulnerability that can be exploited by attackers to bypass security measures and gain unauthorized access...

8.2CVSS6.8AI score0.00791EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.10 views

Adobe Commerce 输入验证错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An input validation error vulnerability exists in Adobe Commerce, which can be exploited by an attacker to execute arbitrary code in the context of the...

9.1CVSS7.5AI score0.01435EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.7 views

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from an authentication error vulnerability that can be exploited by an attacker to gain unauthorized access or elevated privilege...

8.1CVSS7.1AI score0.00781EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.9 views

Adobe Commerce 输入验证错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An input validation error vulnerability exists in Adobe Commerce, which can be exploited by an attacker to execute arbitrary code in the context of the...

7.2CVSS7.5AI score0.01386EPSS
SaveExploits0References3
NVD
NVD
added 2024/06/12 3:15 p.m.57 views

CVE-2024-37297

WooCommerce is an open-source e-commerce platform built on WordPress. A vulnerability introduced in WooCommerce 8.8 allows for cross-site scripting. A bad actor can manipulate a link to include malicious HTML & JavaScript content. While the content is not saved to the database, the links may be...

5.4CVSS0.00483EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/06/12 3:5 p.m.63 views

CVE-2024-37297 WooCommerce has a Cross-Site Scripting Vulnerability in checkout & registration forms

WooCommerce is an open-source e-commerce platform built on WordPress. A vulnerability introduced in WooCommerce 8.8 allows for cross-site scripting. A bad actor can manipulate a link to include malicious HTML & JavaScript content. While the content is not saved to the database, the links may be...

5.4CVSS0.00483EPSS
SaveExploits1References4
OSV
OSV
added 2024/06/12 3:5 p.m.41 views

CVE-2024-37297 WooCommerce has a Cross-Site Scripting Vulnerability in checkout & registration forms

WooCommerce is an open-source e-commerce platform built on WordPress. A vulnerability introduced in WooCommerce 8.8 allows for cross-site scripting. A bad actor can manipulate a link to include malicious HTML & JavaScript content. While the content is not saved to the database, the links may be...

5.4CVSS6AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2024/06/12 3:5 p.m.33 views

CVE-2024-37297 WooCommerce has a Cross-Site Scripting Vulnerability in checkout & registration forms

WooCommerce is an open-source e-commerce platform built on WordPress. A vulnerability introduced in WooCommerce 8.8 allows for cross-site scripting. A bad actor can manipulate a link to include malicious HTML & JavaScript content. While the content is not saved to the database, the links may be...

5.4CVSS6AI score0.00483EPSS
SaveExploits1References4
OSV
OSV
added 2024/06/11 4:15 p.m.7 views

CVE-2024-32144

Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14...

4.3CVSS5.8AI score0.00337EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/11 4:15 p.m.43 views

CVE-2024-32144

Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14...

5.4CVSS0.00337EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/11 3:48 p.m.70 views

CVE-2024-32144

CVE-2024-32144 is a Missing Authorization vulnerability in Welcart e-Commerce (WordPress) affecting the plugin up to version 2.9.14. Multiple connected sources confirm an unauthenticated access issue related to access control, with Red Hat/NVD entries and Wordfence details corroborating Wat:Missi...

5.4CVSS4.9AI score0.00337EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/11 3:48 p.m.16 views

CVE-2024-32144 WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14...

5.4CVSS6.9AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/11 3:48 p.m.42 views

CVE-2024-32144 WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14...

5.4CVSS0.00337EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/11 3:16 p.m.30 views

CVE-2024-37294

Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 2023.10.17, or 2024.04 of the aimeos/aimeos-core package to...

5.5CVSS0.00435EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/11 3:16 p.m.36 views

CVE-2024-37295

Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privileges can upload files that look like images but contain PHP code which can then be executed in the context of the web server. Version...

7.2CVSS0.00607EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/11 3:16 p.m.29 views

CVE-2024-37296

The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment...

5.3CVSS0.0055EPSS
SaveExploits0References6
CVE
CVE
added 2024/06/11 2:38 p.m.59 views

CVE-2024-37295

CVE-2024-37295 affects the Aimeos core framework. Versions before 2024.04.5 (starting from 2024.01.1) allow an admin to upload files that appear image-like but contain PHP code, which can be executed in the web server context (remote code execution). The issue is fixed in 2024.04.5. CVSS v3.1 bas...

7.2CVSS7.1AI score0.00607EPSS
SaveExploits0References1
Rows per page
Query Builder