Lucene search
+L

1311 matches found

CNVD
CNVD
added 2020/11/23 12:0 a.m.5 views

WordPress orbisius-child-theme-creator plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. orbisius-child-theme-creator is a child theme builder plugin used in it. A cross-site request forgery vulnerability exists in versions...

8.8CVSS6.7AI score0.00765EPSS
SaveExploits2References1
NVD
NVD
added 2020/11/16 4:15 a.m.14 views

CVE-2020-28649

The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisiusctcthemeeditormanagefile...

8.8CVSS8.9AI score0.00765EPSS
SaveExploits2References2
Prion
Prion
added 2020/11/16 4:15 a.m.11 views

Cross site request forgery (csrf)

The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisiusctcthemeeditormanagefile...

6.8CVSS8.7AI score0.00765EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2020/11/16 2:50 a.m.24 views

CVE-2020-28649

The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisiusctcthemeeditormanagefile...

8.8CVSS8.8AI score0.00765EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2020/10/14 12:0 a.m.11 views

WordPress Child Theme Creator by Orbisius plugin <= 1.5.1 - Cross-Site Request Forgery (CSRF) to Arbitrary File Modification/Creation vulnerability

Cross-Site Request Forgery CSRF to Arbitrary File Modification/Creation vulnerability found by Chloe Chamberland in WordPress Child Theme Creator by Orbisius plugin versions = 1.5.1. Solution Update the WordPress Child Theme Creator by Orbisius plugin to the latest available version at least 1.5....

3.2AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2020/09/16 12:0 a.m.13 views

WordPress Coupon Creator plugin <= 3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Coupon Creator plugin versions = 3.1. Solution Update the WordPress Coupon Creator plugin to the latest available version at least 3.1.1...

2.9AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/16 12:0 a.m.19 views

PT-2020-7001

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including...

9.8CVSS7.1AI score0.60938EPSS
SaveExploits2References96
Kitploit
Kitploit
added 2020/07/05 12:30 p.m.117 views

HackingTool - ALL IN ONE Hacking Tool For Hackers

This project still in BETA so you may face problems, Please open an issue so i'll fix them..!! Hackingtool Menu AnonSurf Information Gathering Password Attack Wireless Attack SQL Injection Tools Phishing Attack Web Attack Tool Post exploitation Forensic Tools Payload Creator Router Exploit Wifi...

7.7AI score
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2020/06/30 5:59 p.m.27 views

Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by vulnerabilities in OpenSSL (CVE-2019-1547 and CVE-2019-1563)

Summary IBM Bootable Media Creator BoMC has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: OpenSSL could allow a local authenticated attacker to obtain sensitive information, caused by the ability to construct an EC group missing the cofactor usin...

4.7CVSS0.6AI score0.03838EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2020/06/24 6:53 p.m.48 views

Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by a vulnerability in cURL (CVE-2019-5482)

Summary IBM Bootable Media Creator BoMC has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-5482 DESCRIPTION: cURL libcurl is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the tftpreceivepacket function. By sending specially-crafted...

9.8CVSS1AI score0.17939EPSS
SaveExploits0
CNVD
CNVD
added 2020/06/22 12:0 a.m.6 views

Mattermost Server Information Disclosure Vulnerability (CNVD-2020-48237)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.3.0, prior to 4.2.1, and prior to 4.1.2. An attacker could exploit the vulnerability to obtain the e-mail address of the team...

5.3CVSS6.7AI score0.0092EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/19 7:15 p.m.26 views

CVE-2017-18887

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It discloses the team creator's e-mail address to members...

5.3CVSS0.0092EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/09 7:15 p.m.3 views

CVE-2020-11957

The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...

7.5CVSS7.1AI score0.00394EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/09 7:15 p.m.17 views

CVE-2020-11957

The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...

7.5CVSS0.00394EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/06/09 6:26 p.m.20 views

CVE-2020-11957

The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...

7.4AI score0.00394EPSS
SaveExploits0References1
CVE
CVE
added 2020/06/09 6:26 p.m.48 views

CVE-2020-11957

CVE-2020-11957 affects Cypress PSoC Creator BLE 4.2 component, where versions before 3.64 generate a 128-bit Pairing Random with insufficient entropy. This weak random value enables a nearby attacker to perform a MITM during BLE pairing for both LE Secure Connections and LE Legacy Pairing (authen...

7.5CVSS7.4AI score0.00394EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2020/06/08 6:11 a.m.11 views

csscreator.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1188571 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

0.7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.11 views

Print job fails if Creator Owner is removed from Windows Server 2012 R2 or Windows Server 2012

Print job fails if Creator Owner is removed from Windows Server 2012 R2 or Windows Server 2012 This article describes an issue that occurs when a client computer connects to the print queue and tries to print a file in Windows Server 2012 R2 or Windows Server 2012. You can fix this issue by using...

6.4AI score
SaveExploits0
OSV
OSV
added 2020/02/11 12:15 p.m.6 views

CVE-2016-5710

NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

4.6CVSS5.8AI score0.00709EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/11 12:15 p.m.23 views

CVE-2016-5710

NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

4.6CVSS4.5AI score0.00709EPSS
SaveExploits0References1
Rows per page
Query Builder