9655 matches found
CVE-2023-34020
creationtimestamp| type| source ---|---|--- 2023-11-24 13:47:31+00:00| seen| https://t.me/arpsyndicate/526 2023-11-27 23:44:38+00:00| seen| https://t.me/arpsyndicate/612 2023-12-23 11:18:07+00:00| seen| https://t.me/arpsyndicate/2119...
CVE-2023-45573
creationtimestamp| type| source ---|---|--- 2023-11-23 14:09:03+00:00| seen| https://t.me/arpsyndicate/502 2024-01-09 03:14:39+00:00| seen| https://t.me/arpsyndicate/2705...
The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read
Description The plugin discloses the content of password protected posts to unauthenticated users via a crafted request PoC Append "?view=single-event" to a password protected post, then view the source of the page and find the post content disclosed in...
The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read
Description The plugin discloses the content of password protected posts to unauthenticated users via a crafted request Append "?view=single-event" to a password protected post, then view the source of the page and find the post content disclosed in Example:...
WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)
Software Events Manager Type Plugin Vulnerable versions = 6.4.5 Fixed in 6.4.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48326 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cb641dde12e8 Credits Le Ngoc Anh Required privilege...
WordPress The Events Calendar Plugin < 6.2.8.1 is vulnerable to Sensitive Data Exposure
Software The Events Calendar Type Plugin Vulnerable versions 6.2.8.1 Fixed in 6.2.8.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Liquid Web / StellarWP PSID fb9bc5b80294 Credits Krzysztof Zając Require...
User profile settings are not saved with WEM
User profile saved settings are not saved. UPM or WEM settings are missing in the registry key locations following = HKLM/Software/Policies/Citrix/UserProfileManager HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Control\Norskale\Agent Host\UsvMachineConfigurationSettings...
Important: kernel
Issue Overview: A race condition between two functions, lmLogClose and txEnd, in the Linux kernel's JFS filesystem can lead to a use-after-free vulnerability and crash. CVE-2023-3397 An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO...
Important: kernel
Issue Overview: An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kern...
WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control
Software Events Addon for Elementor Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.1.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47827 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5dbac8531308 Credits Abdi Pranata...
Adobe Acrobat Reader Resource Management Error Vulnerability
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in Adobe Acrobat Reader version 2023.006.20320, which arises from post-release reuse in page event processing and c...
kernel: drm/amdkfd: Fix an illegal memory access
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...
CVE-2023-44322
A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.0, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.0, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.0, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.0, SCALANCE...
WordPress Plugin WP Event Manager - Events Calendar, Registrations, Sell Tickets with WooCommerce Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP Event Manager -...
CVE-2023-31093
Cross-Site Request Forgery CSRF vulnerability in Chronosly Chronosly Events Calendar plugin = 2.6.2 versions...
CVE-2023-31093
Cross-Site Request Forgery CSRF vulnerability in Chronosly Chronosly Events Calendar plugin = 2.6.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Chronosly Chronosly Events Calendar plugin = 2.6.2 versions...
CVE-2023-31093 WordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Chronosly Chronosly Events Calendar plugin = 2.6.2 versions...
CVE-2023-31093 WordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Chronosly Chronosly Events Calendar plugin = 2.6.2 versions...
