Lucene search
+L

13081 matches found

Cvelist
Cvelist
•added 2024/06/12 9:13 a.m.•55 views

CVE-2023-51413 WordPress Piotnet Forms plugin <= 1.0.29 - Broken Access Control vulnerability

Missing Authorization vulnerability in Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.29...

5.3CVSS0.00295EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/12 12:00 a.m.•29 views

WordPress plugin Piotnet Forms security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.3AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/12 12:00 a.m.•9 views

PT-2024-14118

Name of the Vulnerable Software and Affected Versions Piotnet Forms versions 1.0.0 through 1.0.29 Description A Missing Authorization issue has been identified. Recommendations For versions 1.0.0 through 1.0.29, update to a version that contains a fix for this issue...

5.3CVSS5.6AI score0.00295EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•8 views

CVE-2023-51413: Missing Authorization

Missing Authorization vulnerability in Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.29...

5.3CVSS8.6AI score0.00295EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2024/06/11 8:22 p.m.•5 views

org.keycloak:keycloak-forms (1.0-alpha-1-12062013), org.keycloak:keycloak-server (1.0-alpha-1-12062013) potentially affected by CVE-2024-3656 via org.keycloak:keycloak-services (1.0-alpha-1-12062013)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1-12062013 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1-12062013 - org.keycloak:keycloak-server...

8.1CVSS7.4AI score0.03323EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2024/06/11 8:22 p.m.•6 views

org.keycloak:keycloak-forms (1.0-alpha-1) potentially affected by CVE-2024-3656 via org.keycloak:keycloak-services (1.0-alpha-1)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1 Source cves: CVE-2024-3656 Source advisory:...

8.1CVSS7.4AI score0.03323EPSS
SaveExploits0
CVE
CVE
•added 2024/06/11 5:33 a.m.•88 views

CVE-2024-4319

CVE-2024-4319 affects the WordPress plugin Advanced Contact form 7 DB . The vulnerability is due to a missing capability check in the function vsz_cf7_export_to_excel, allowing unauthenticated attackers to download submitted form entries. Affected versions are up to and including 2.0.2 ; remediat...

5.3CVSS5.7AI score0.00482EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•9 views

PT-2024-4921

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. This vulnerability could be exploited by an attacker to inject malicious scripts into vulnerable form...

5.5CVSS5.6AI score0.00717EPSS
SaveExploits0References5
vulnersOsv
vulnersOsv
•added 2024/06/10 6:36 p.m.•5 views

org.keycloak:keycloak-forms (1.0-alpha-1) potentially affected by CVE-2024-4540 via org.keycloak:keycloak-services (1.0-alpha-1)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1 Source cves: CVE-2024-4540 Source advisory:...

7.5CVSS7.2AI score0.00551EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2024/06/10 6:36 p.m.•5 views

org.keycloak:keycloak-forms (1.0-alpha-1-12062013), org.keycloak:keycloak-server (1.0-alpha-1-12062013) potentially affected by CVE-2024-4540 via org.keycloak:keycloak-services (1.0-alpha-1-12062013)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1-12062013 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1-12062013 - org.keycloak:keycloak-server...

7.5CVSS7.2AI score0.00551EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/06/10 8:15 a.m.•14 views

CVE-2024-35742

Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...

7.3CVSS5.8AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/10 8:15 a.m.•40 views

CVE-2024-35742

Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...

7.3CVSS0.00316EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/10 7:40 a.m.•83 views

CVE-2024-35742

CVE-2024-35742 is listed in the initial document as a Missing Authorization vulnerability in Easy Forms for Mailchimp affecting versions up to 6.9.0. The connected documents do not provide detailed technical specifics (no root cause, impact, affected sub-components, or remediation steps) beyond t...

7.3CVSS5.8AI score0.00316EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/10 7:40 a.m.•27 views

CVE-2024-35742 WordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...

5.3CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/10 12:00 a.m.•7 views

PT-2024-26695

Name of the Vulnerable Software and Affected Versions Easy Forms for Mailchimp versions 6.9.0 and earlier Description The issue is related to a Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp. Recommendations For versions 6.9.0 and earlier, update to a version later...

7.3CVSS5.9AI score0.00316EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•5 views

CVE-2024-35742: Missing Authorization

Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0...

7.3CVSS5.8AI score0.00316EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/10 12:00 a.m.•14 views

WordPress plugin Easy Forms for Mailchimp security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin... A security vulnerability...

7.3CVSS5.8AI score0.00316EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2024/06/07 6:24 p.m.•22 views

TYPO3 Cross-Site Scripting in Form Framework

Failing to properly encode user input, frontend forms handled by the form framework system extension “form” are vulnerable to cross-site scripting...

6.7AI score
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2024/06/07 12:00 a.m.•26 views

PT-2024-27123 · WordPress · Powerpack Pro For Elementor

Name of the Vulnerable Software and Affected Versions: PowerPack Pro for Elementor plugin for WordPress versions up to, and including, 2.10.17 Description: The issue is due to the plugin not restricting low privileged users from setting a default role for a registration form. This makes it possib...

8.8CVSS5.7AI score0.00431EPSS
SaveExploits0References10
NVD
NVD
•added 2024/06/06 4:15 p.m.•64 views

CVE-2024-37156

The SuluFormBundle adds support for creating dynamic forms in Sulu Admin. The TokenController get parameter formName is not sanitized in the returned input field which leads to XSS. This vulnerability is fixed in 2.5.3...

6.1CVSS0.00292EPSS
SaveExploits0References2
Rows per page
Query Builder