Lucene search
+L

9655 matches found

Circl
Circl
added 2023/12/18 11:17 p.m.9 views

CVE-2023-6765

creationtimestamp| type| source ---|---|--- 2023-12-18 23:17:43+00:00| seen| https://t.me/ctinow/156177 2024-01-10 08:36:29+00:00| seen| https://t.me/ctinow/165624...

9.8CVSS6.2AI score0.00741EPSS
SaveExploits1References2
OSV
OSV
added 2023/12/18 8:15 p.m.6 views

CVE-2023-6203

The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated users via a crafted request...

7.5CVSS5.8AI score0.00776EPSS
SaveExploits2References1
NVD
NVD
added 2023/12/18 8:15 p.m.25 views

CVE-2023-6203

The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated users via a crafted request...

7.5CVSS0.00776EPSS
SaveExploits2References1
Prion
Prion
added 2023/12/18 8:15 p.m.17 views

Cross site request forgery (csrf)

The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated users via a crafted request...

5CVSS7.2AI score0.00776EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/12/18 8:07 p.m.42 views

CVE-2023-6203 The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read

The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated users via a crafted request...

7.7AI score0.00776EPSS
SaveExploits2References1
Circl
Circl
added 2023/12/18 10:50 a.m.9 views

CVE-2021-36369

creationtimestamp| type| source ---|---|--- 2023-12-18 10:50:24+00:00| seen| https://t.me/arpsyndicate/1967 2024-01-06 12:56:19+00:00| seen| https://t.me/arpsyndicate/2537...

7.5CVSS8.3AI score0.01463EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/18 12:00 a.m.11 views

WordPress Plugin Events Calendar Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.5CVSS6.6AI score0.00776EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2023/12/18 12:00 a.m.9 views

PT-2023-32567 · WordPress · The Events Calendar

Name of the Vulnerable Software and Affected Versions: The Events Calendar WordPress plugin versions prior to 6.2.8.1 Description: The issue allows unauthenticated users to access the content of password-protected posts via a crafted request. Recommendations: For versions prior to 6.2.8.1, update...

7.5CVSS7.1AI score0.00776EPSS
SaveExploits2References5
Amazon
Amazon
added 2023/12/18 12:00 a.m.8 views

Important: kernel-livepatch-6.1.49-70.116

Issue Overview: An integer overflow in kmallocreserve in the Linux kernel may allow a local user to crash the system, or in some cases obtain code execution in kernel space. CVE-2023-42752 An issue was discovered in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel...

7.8CVSS8.1AI score0.00849EPSS
SaveExploits1
Amazon
Amazon
added 2023/12/18 12:00 a.m.6 views

Important: kernel-livepatch-6.1.52-71.125

Issue Overview: An integer overflow in kmallocreserve in the Linux kernel may allow a local user to crash the system, or in some cases obtain code execution in kernel space. CVE-2023-42752 An issue was discovered in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel...

7.8CVSS8.1AI score0.00849EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2023/12/18 12:00 a.m.38 views

SUSE: Security Advisory (SUSE-SU-2023:4883-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.6AI score0.00976EPSS
SaveExploits0References28
CVE
CVE
added 2023/12/15 9:59 p.m.98 views

CVE-2023-50728

CVE-2023-50728 affects the octokit/webhooks library used by Node.js projects. The root cause is a flaw in error handling where an error can be undefined, causing an uncaught exception that terminates the Node.js process. Affected versions include 9.26.0 through 9.26.3, 10.9.2, 11.1.2, and 12.0.4....

7.5CVSS6.2AI score0.00731EPSS
SaveExploits0References8Affected Software3
OSV
OSV
added 2023/12/15 9:59 p.m.35 views

CVE-2023-50728 Unauthenticated Denial of Service in the octokit/webhooks library

octokit/webhooks is a GitHub webhook events toolset for Node.js. Starting in 9.26.0 and prior to 9.26.3, 10.9.2, 11.1.2, and 12.0.4, there is a problem caused by an issue with error handling in the @octokit/webhooks library because the error can be undefined in some cases. The resulting request w...

5.4CVSS7.3AI score
SaveExploits0References10
Circl
Circl
added 2023/12/15 8:59 p.m.10 views

CVE-2023-50643

creationtimestamp| type| source ---|---|--- 2023-12-15 20:59:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6198 2024-01-09 02:26:24+00:00| seen| https://t.me/ctinow/164750 2024-01-12 19:26:58+00:00| seen| https://t.me/ctinow/167468 2024-01-17 04:54:56+00:00|...

9.8CVSS7.3AI score0.01695EPSS
SaveExploits1References7
OSV
OSV
added 2023/12/15 3:15 p.m.30 views

CVE-2023-49181

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce allows Stored XSS.This issue affects WP Event Manager – Events Calendar, Registrations, Sell Ticket...

5.4CVSS6.7AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/15 3:15 p.m.25 views

CVE-2023-49181

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce allows Stored XSS.This issue affects WP Event Manager – Events Calendar, Registrations, Sell Ticket...

5.9CVSS0.00382EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/14 12:00 a.m.35 views

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:4783-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4783-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixe...

7.8CVSS6.7AI score0.00976EPSS
SaveExploits0References27
OSV
OSV
added 2023/12/13 6:01 p.m.18 views

SUSE-SU-2023:4811-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39197: Fixed a out-of-bounds read in nfconntrackdccppacket bsc1216976. - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm...

7.8CVSS6.8AI score0.00976EPSS
SaveExploits0References23
OSV
OSV
added 2023/12/13 12:41 p.m.11 views

SUSE-SU-2023:4783-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39197: Fixed a out-of-bounds read in nfconntrackdccppacket bsc1216976. - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm...

7.8CVSS6.8AI score0.00976EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2023/12/13 12:00 a.m.35 views

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2023:4734-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4734-1 advisory. The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following...

9.8CVSS6.9AI score0.01052EPSS
SaveExploits0References78
Rows per page
Query Builder