Lucene search
+L

521 matches found

OSV
OSV
•added 2016/06/29 2:10 p.m.•6 views

DEBIAN-CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

7.5CVSS7AI score0.02832EPSS
SaveExploits0References1
Prion
Prion
•added 2016/06/29 2:10 p.m.•23 views

Design/Logic Flaw

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

5CVSS7AI score0.02832EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
•added 2016/06/29 2:10 p.m.•37 views

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

7.5CVSS7.1AI score0.02832EPSS
SaveExploits0References3
OSV
OSV
•added 2016/06/29 2:10 p.m.•11 views

UBUNTU-CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

7.5CVSS7.1AI score0.02832EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2016/06/29 2:00 p.m.•40 views

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

7.5AI score0.02832EPSS
SaveExploits0References6
CVE
CVE
•added 2016/06/29 2:00 p.m.•114 views

CVE-2016-5832

CVE-2016-5832 affects WordPress prior to 4.5.3, where the customizer could be abused by remote attackers to bypass redirected navigation restrictions via unspecified vectors. Impact is bypass of redirection restrictions; no data exposure or other impacts stated in the provided documents. The issu...

7.5CVSS7.3AI score0.02832EPSS
SaveExploits0References6Affected Software1
Mend
Mend
•added 2016/06/29 2:00 p.m.•1 views

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

8.7CVSS0.02832EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2016/06/29 2:00 p.m.•40 views

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

7.5CVSS6.6AI score0.02832EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/06/29 12:00 a.m.•6 views

CVE-2016-5832: Undefined Security Weakness

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

7.5CVSS7.3AI score0.02832EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/06/28 12:00 a.m.•9 views

WordPress Redirection Bypass Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A redirection bypass vulnerability exists in the WordPress 4.5.2 and earlier versions of the customizer, which can be exploited by an attacker to bypass redirection...

7.5CVSS6.7AI score0.02832EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2016/06/23 12:00 a.m.•36 views

WordPress <= 4.5.2 - BYPASS #4

The customizer allows an attacker to bypass intended redirection restrictions via unspecified vectors. Related records: http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass-1...

7.5CVSS4.6AI score0.02832EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2016/05/22 1:59 a.m.•24 views

CVE-2016-1564

Multiple cross-site scripting XSS vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a 1 stylesheet name or 2 template name to wp-admin/customize.php...

6.1CVSS6AI score
SaveExploits0References8
Mageia
Mageia
•added 2015/08/10 2:31 p.m.•49 views

Updated wordpress package fixes security vulnerability

The wordpress package has been updated to version 3.9.8, fixing three cross-site scripting issues CVE-2015-5732, CVE-2015-5733, CVE-2015-5734, a potential timing side-channel attack in Customizer CVe-2015-5730, an issue in Heartbeat where an attacker could lock a post from being edited...

7.5CVSS6.8AI score0.09665EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2014/10/09 1:51 a.m.•26 views

CAINE 6.0 "Dark Matter" - Distribution with a complete forensic environment

CAINE Computer Aided INvestigative Environment is an Italian GNU/Linux live distribution created as a project of Digital Forensics. Currently the project manager is Nanni Bassetti. CAINE offers a complete forensic environment that is organized to integrate existing software tools as software...

7.3AI score
SaveExploits0
OSV
OSV
•added 2012/07/22 5:55 p.m.•15 views

DEBIAN-CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS6.9AI score0.01241EPSS
SaveExploits0References1
Prion
Prion
•added 2012/07/22 5:55 p.m.•23 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7.5AI score0.01241EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2012/07/22 5:55 p.m.•20 views

CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS5.9AI score0.01241EPSS
SaveExploits0References3
Mend
Mend
•added 2012/07/22 5:00 p.m.•3 views

CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS0.01241EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2012/07/22 5:00 p.m.•42 views

CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS6.8AI score0.01241EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/07/22 12:00 a.m.•3 views

CVE-2012-3384: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS5.9AI score0.01241EPSS
SaveExploits0References2
Rows per page
Query Builder