Lucene search
+L

1588 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/27 12:00 a.m.•5 views

CVE-2016-10935: Undefined Security Weakness

The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation...

9.8CVSS5.8AI score0.02138EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/08/27 12:00 a.m.•5 views

PT-2019-7728

Name of the Vulnerable Software and Affected Versions WooCommerce Exporter plugin versions prior to 1.8.4 Description The issue allows for privilege escalation. Recommendations For versions prior to 1.8.4, update to version 1.8.4 or later to resolve the issue...

9.8CVSS0.02138EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/08/22 12:00 a.m.•3 views

PT-2019-13982

Name of the Vulnerable Software and Affected Versions webtoffee WordPress Users & WooCommerce Customers Import Export plugin version 1.3.0 Description The issue allows CSV injection in the user url, display name, first name, and last name columns in an exported CSV file created by the WF...

7.3CVSS0.05141EPSS
SaveExploits5References8
CNVD
CNVD
•added 2019/08/16 12:00 a.m.•20 views

WordPress wp-ultimate-exporter plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-exporter is a plugin that exports CSV files based on filtering criteria used in it. A cross-site request forgery...

8.8CVSS6.7AI score0.00649EPSS
SaveExploits0References1
OSV
OSV
•added 2019/08/14 4:15 p.m.•20 views

CVE-2018-20968

The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...

8.8CVSS5.8AI score0.00649EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/08/14 3:21 p.m.•34 views

CVE-2018-20968

The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...

8.8AI score0.00649EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/14 3:21 p.m.•69 views

CVE-2018-20968

The CVE-2018-20968 issue affects the WordPress wp-ultimate-exporter plugin prior to version 1.4.2. It is a CSRF vulnerability where requests from an untrusted origin can be forged because the plugin does not adequately verify that requests come from trusted users. Impact details in public sources...

8.8CVSS8.7AI score0.00649EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/14 12:00 a.m.•3 views

PT-2019-10404

Name of the Vulnerable Software and Affected Versions wp-ultimate-exporter plugin versions prior to 1.4.2 Description The issue concerns a CSRF problem. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue...

8.8CVSS0.00649EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/14 12:00 a.m.•7 views

CVE-2018-20968: Cross-Site Request Forgery (CSRF)

The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...

8.8CVSS5.7AI score0.00649EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2019/02/07 12:37 p.m.•232 views

DFIRTrack - The Incident Response Tracking Application

DFIRTrack Digital Forensics and Incident Response Tracking application is an open source web application mainly based on Django using a PostgreSQL database backend. In contrast to other great incident response tools, which are mainly case-based and support the work of CERTs, SOCs etc. in their...

7.5AI score
SaveExploits0References10
CNVD
CNVD
•added 2018/12/25 12:00 a.m.•19 views

Synology DiskStation Manager Improper Escape Neutralization Vulnerability

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music, and more. An improper escape neutralization vulnerability exists in Log Exporter in Synology DSM versions prio...

7.2CVSS6.9AI score0.01027EPSS
SaveExploits0References1
OSV
OSV
•added 2018/12/24 3:29 p.m.•14 views

CVE-2018-8920

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...

7.2CVSS5.9AI score0.01027EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2018/12/24 3:29 p.m.•22 views

CVE-2018-8920

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...

7.2CVSS5.9AI score0.01027EPSS
SaveExploits0References2
NVD
NVD
•added 2018/12/24 3:29 p.m.•29 views

CVE-2018-8920

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...

7.2CVSS6.4AI score0.01027EPSS
SaveExploits0References1
Prion
Prion
•added 2018/12/24 3:29 p.m.•32 views

Input validation

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...

6.5CVSS7AI score0.01027EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/12/24 3:00 p.m.•38 views

CVE-2018-8920

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...

5.9CVSS7.1AI score0.01027EPSS
SaveExploits0References1
CVE
CVE
•added 2018/12/24 3:00 p.m.•68 views

CVE-2018-8920

CVE-2018-8920 affects Synology DiskStation Manager (DSM) prior to 6.1.6-15266, via the Log Exporter. The root cause is improper neutralization of escape characters when exporting an archive in CSV format, enabling remote attackers to inject arbitrary content with an unspecified impact. The vulner...

7.2CVSS7AI score0.01027EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/12/24 12:00 a.m.•14 views

PT-2018-18718 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.6-15266 Description: The issue is related to improper neutralization of escape in the Log Exporter component, allowing remote attackers to inject arbitrary content when exporting an archi...

7.2CVSS7.3AI score0.01027EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/24 12:00 a.m.•6 views

CVE-2018-8920: Improper Encoding or Escaping of Output

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an archive in CSV format...

7.2CVSS6AI score0.01027EPSS
SaveExploits0References3
n0where
n0where
•added 2018/11/21 7:36 p.m.•115 views

The Incident Response Tracking Application: DFIRTrack

DFIRTrack Digital Forensics and Incident Response Tracking application is an open source web application mainly based on Django using a PostgreSQL database backend. In contrast to other great incident response tools, which are mainly case-based and support the work of CERTs, SOCs etc. in their...

0.2AI score
SaveExploits0References2
Rows per page
Query Builder