Lucene search
+L

5 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-25718

Malicious code in bioql PyPI...

5.3CVSS6.4AI score0.0024EPSS
SaveExploits0References2
osv_suse
osv_suse
•added 2025/08/27 11:57 a.m.•5 views

SUSE-SU-2025:02992-1 Security update for tomcat11

This update for tomcat11 fixes the following issues: Updated to Tomcat 11.0.10 - CVE-2025-48989: Fixed 'MadeYouReset' DoS in HTTP/2 due to client triggered stream reset bsc1243895 Other fixes: Catalina + Fix: Fix bloom filter population for archive indexing when using a packed WAR containing one ...

7.5CVSS7.3AI score0.03686EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2021/11/08 6:15 p.m.•17 views

CVE-2021-24674

The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack...

6.5CVSS5.8AI score0.00549EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2021/11/08 12:00 a.m.•5 views

PT-2021-16185

Name of the Vulnerable Software and Affected Versions Genie WP Favicon WordPress plugin versions through 0.5.2 Description The issue concerns the lack of CSRF protection when updating the favicon, potentially allowing attackers to manipulate a logged-in admin into changing it via a CSRF attack...

6.5CVSS0.00549EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/08 12:00 a.m.•9 views

CVE-2021-24674: Cross-Site Request Forgery (CSRF)

The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack...

6.5CVSS5.8AI score0.00549EPSS
SaveExploits2References3
Rows per page
Query Builder