Lucene search
+L

844 matches found

CVE
CVE
added 2024/08/28 12:0 a.m.60 views

CVE-2024-41565

CVE-2024-41565 affects JustEnoughItems (JEI) version 19.5.0.33 and earlier, with an improper validation of slot index/position/offset in input for Minecraft that can lead to in‑game item duplication. Red Hat and OSV/NVD disclosures corroborate the vulnerability description. The connected document...

5.3CVSS6.9AI score0.00311EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/08/28 12:0 a.m.23 views

CVE-2024-41565

JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...

4.3CVSS0.00311EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/08/28 12:0 a.m.21 views

CVE-2024-42698

Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...

4.3CVSS7AI score0.00311EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/28 12:0 a.m.25 views

CVE-2024-42698

Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...

4.3CVSS0.00311EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/28 12:0 a.m.7 views

PT-2024-29445 · Emi · Emi

Name of the Vulnerable Software and Affected Versions: EMI versions 1.1.10 and before Description: The issue is related to an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. Specifically, it is a failure to validate slot index and decrement stack count in the E...

5.3CVSS7.2AI score0.00266EPSS
SaveExploits0References9
CVE
CVE
added 2024/08/28 12:0 a.m.53 views

CVE-2024-41564

EMI v1.1.10 and earlier for Minecraft contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability, caused by failure to validate the slot index and decrement the stack count in the EMI mod. This leads to in-game item duplication. The issue is fixed in EMI v1.1.1...

5.3CVSS6.9AI score0.00266EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/08/28 12:0 a.m.11 views

CVE-2024-41565

JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...

4.3CVSS6.7AI score0.00311EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/08/22 5:30 a.m.7 views

WordPress Themify Builder plugin <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication vulnerability

Missing Authorization to Authenticated Contributor+ Post Duplication vulnerability discovered by Peter Thaleikis in WordPress Plugin Themify Builder versions = 7.6.1...

4.3CVSS7AI score0.0029EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/08/22 3:15 a.m.4 views

CVE-2024-7836

The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicatepageajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate...

4.3CVSS5.8AI score0.0029EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/22 3:15 a.m.24 views

CVE-2024-7836

The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicatepageajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate...

4.3CVSS0.0029EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/22 2:2 a.m.33 views

CVE-2024-7836 Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication

The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicatepageajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate...

4.3CVSS0.0029EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/22 2:2 a.m.61 views

CVE-2024-7836

CVE-2024-7836 affects the WordPress plugin Themify Builder: all versions up to and including 7.6.1 are vulnerable to unauthorized post duplication due to missing checks in the duplicate_page_ajaxify function. This allows authenticated attackers with Contributor-level access and above to duplicate...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/22 2:2 a.m.14 views

CVE-2024-7836 Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication

The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicatepageajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate...

4.3CVSS6.8AI score0.0029EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/17 9:15 a.m.7 views

AZL-47971 CVE-2024-42310 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes In cdvintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a NULL pointer dereference on failure of drmmodeduplicate. Add...

5.5CVSS6.3AI score0.00226EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/17 9:15 a.m.10 views

AZL-48063 CVE-2024-42310 affecting package kernel for versions less than 6.6.47.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes In cdvintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a NULL pointer dereference on failure of drmmodeduplicate. Add...

5.5CVSS6.3AI score0.00226EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/17 9:15 a.m.1 views

DEBIAN-CVE-2024-42309

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psbintellvdsgetmodes In psbintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

5.5CVSS5.6AI score0.00226EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2024/08/06 2:1 a.m.4 views

SUSE CVE-2024-41089

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes In nv17tvgethdmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

5.5CVSS6.4AI score0.00236EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2024/08/06 2:0 a.m.4 views

SUSE CVE-2024-41095

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgetldmodes In nv17tvgetldmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

5.5CVSS6.4AI score0.00236EPSS
SaveExploits0References16
Patchstack
Patchstack
added 2024/07/22 4:49 p.m.7 views

WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability

Unauthenticated Message Duplication Vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Icegram versions = 3.1.24...

5.3CVSS6.9AI score0.0035EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/07/15 7:15 p.m.13 views

CVE-2024-36438

eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks...

7.3CVSS0.00193EPSS
SaveExploits0References2
Rows per page
Query Builder