Lucene search
K

150 matches found

Vulnrichment
Vulnrichment
added 2024/06/12 9:25 a.m.14 views

CVE-2023-47845 WordPress Grab & Save plugin <= 1.0.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Lim Kai Yang Grab & Save.This issue affects Grab & Save: from n/a through 1.0.4...

4.3CVSS7.2AI score0.00172EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/12 9:25 a.m.33 views

CVE-2023-47845 WordPress Grab & Save plugin <= 1.0.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Lim Kai Yang Grab & Save.This issue affects Grab & Save: from n/a through 1.0.4...

4.3CVSS0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/06/12 12:0 a.m.5 views

WordPress plugin Grab & Save Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

4.3CVSS6.5AI score0.00172EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/05/22 11:45 a.m.7 views

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

7.3CVSS5.8AI score0.00513EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2024/05/13 12:0 a.m.260 views

Panel.SmokeLoader MVID-2024-0682 Cross Site Request Forgery / Cross Site Scripting

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/4b5fc3a2489985f314b81d35eac3560fB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Panel.SmokeLoader Vulnerability: Cross Site Request Forgery CSRF - Persistent XSS Family:...

7.4AI score
Exploits0
RedHat Linux
RedHat Linux
added 2024/04/30 4:49 p.m.4 views

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

7.3CVSS5.8AI score0.00513EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/04/24 3:51 p.m.2 views

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

7.3CVSS5.8AI score0.00513EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/04/24 3:49 p.m.5 views

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

7.3CVSS5.8AI score0.00513EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/04/24 3:37 p.m.4 views

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

7.3CVSS5.8AI score0.00513EPSS
Exploits0References4
Amazon
Amazon
added 2024/04/18 12:0 a.m.4 views

Important: xorg-x11-server

Issue Overview: A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a clie...

7.8CVSS7AI score0.01843EPSS
Exploits0
Amazon
Amazon
added 2024/04/17 12:0 a.m.5 views

Important: xorg-x11-server

Issue Overview: A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a clie...

7.8CVSS6.9AI score0.01843EPSS
Exploits0
OSV
OSV
added 2024/04/04 2:15 p.m.7 views

AZL-44637 CVE-2024-31081 affecting package xorg-x11-server 1.20.10-6

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

7.3CVSS7.3AI score0.00513EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/02 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a security flaw in grab sumount...

5.5CVSS5.1AI score0.00148EPSS
Exploits0References5
NVD
NVD
added 2024/03/26 4:15 p.m.11 views

CVE-2024-25958

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...

7.8CVSS6.4AI score0.00127EPSS
Exploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.21 views

CVE-2024-25956

Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system information...

5.5CVSS5.3AI score0.00156EPSS
Exploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.3 views

CVE-2024-25958

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...

7.8CVSS5.7AI score0.00127EPSS
Exploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.2 views

CVE-2024-25956

Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system information...

5.5CVSS5.8AI score0.00156EPSS
Exploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.4 views

CVE-2024-25957

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync...

5.5CVSS5.8AI score0.00156EPSS
Exploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.24 views

CVE-2024-25957

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync...

5.5CVSS4.7AI score0.00156EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 3:31 p.m.18 views

CVE-2024-25956

Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system information...

5.5CVSS6.4AI score0.00156EPSS
Exploits0References1
Rows per page
Query Builder