Lucene search
+L

8790 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•9 views

CVE-2024-56253: Missing Authorization

Missing Authorization vulnerability in supsystic Data Tables Generator by Supsystic data-tables-generator-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Data Tables Generator by Supsystic: from n/a through = 1.10.36...

5.4CVSS8.7AI score0.00333EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•23 views

MetaCPAN Net::EasyTCP security vulnerability

MetaCPAN Net::EasyTCP is a module of the MetaCPAN Foundation. It is used to create secure, bandwidth-friendly TCP/IP clients and servers. A security vulnerability exists in MetaCPAN Net::EasyTCP versions prior to 0.15, which stems from the use of Perl's built-in rand function to generate...

5.4CVSS5.7AI score0.00314EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/12/30 4:26 p.m.•18 views

WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ngô Thái An Patchstack Alliance in WordPress Plugin Data Tables Generator by Supsystic versions = 1.10.36...

5.4CVSS7AI score0.00333EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/12/26 11:37 a.m.•16 views

WordPress Barcode Generator for WooCommerce plugin <= 2.0.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin Barcode Generator for WooCommerce versions = 2.0.2...

6.5CVSS7AI score0.0035EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/25 4:22 a.m.•11 views

CVE-2024-12636 Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.2.7 - Cross-Site Request Forgery

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.6. This is due to missing or incorrect nonce validation on the 'createpopupdeleteprocess' functio...

4.3CVSS8.1AI score0.00175EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2024/12/19 11:19 a.m.•7 views

Malware in tailchat-service-swagger-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/12/19 11:09 a.m.•5 views

Malware in tailchat-service-openapi-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/19 10:52 a.m.•7 views

Malicious code in eip-681-qr-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6d992f1267c6eb7db2bca81d0ea6f421daa4852af6172164111cf8b51ffbbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2024/12/19 10:52 a.m.•11 views

MAL-2024-11975 Malicious code in eip-681-qr-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6d992f1267c6eb7db2bca81d0ea6f421daa4852af6172164111cf8b51ffbbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/12/19 10:52 a.m.•5 views

Malware in eip-681-qr-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2024/12/19 8:57 a.m.•582 views

Exploit for CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder...

7.5CVSS9.4AI score0.0749EPSS
SaveExploits3
NVD
NVD
•added 2024/12/16 4:15 p.m.•37 views

CVE-2024-55999

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS0.00409EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 3:53 p.m.•20 views

CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS8.4AI score0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/16 3:53 p.m.•49 views

CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS0.00409EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/16 3:15 p.m.•29 views

CVE-2024-55978

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...

9.3CVSS0.00769EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/16 3:15 p.m.•31 views

CVE-2024-54364

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...

7.1CVSS0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:31 p.m.•17 views

CVE-2024-54364 WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...

7.1CVSS8.4AI score0.00436EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/16 2:31 p.m.•72 views

CVE-2024-54364

CVE-2024-54364 is a Reflected XSS in the Feedpress Generator WordPress plugin (up to version 1.2.1) caused by improper neutralization of input during web page generation; affected product and exact root cause are stated, but no patch or exploit details are provided in the connected documents.

7.1CVSS8.4AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/16 2:31 p.m.•47 views

CVE-2024-54364 WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spartac Feedpress Generator feedpress-generator allows Reflected XSS.This issue affects Feedpress Generator: from n/a through = 1.2.1...

7.1CVSS0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:31 p.m.•15 views

CVE-2024-55978 WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...

9.3CVSS8.4AI score0.00769EPSS
SaveExploits1References1
Rows per page
Query Builder