Lucene search
+L

1109 matches found

Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•15 views

PT-2024-36185 · WordPress · Hive Support – Wordpress Help Desk

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

8.5CVSS8AI score0.00504EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•10 views

PT-2024-17606 · WordPress · Property Hive Stamp Duty Calculator

Name of the Vulnerable Software and Affected Versions: Property Hive Stamp Duty Calculator plugin for WordPress versions up to, and including, 1.0.22 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'stamp duty calculator scotland' shortcode due to insufficient...

6.4CVSS6.2AI score0.00311EPSS
SaveExploits0References6
CNVD
CNVD
•added 2024/12/13 12:00 a.m.•17 views

Apache Hive Code Execution Vulnerability

Apache Hive is a set of data warehouse software based on Hadoop Distributed Systems Infrastructure from the Apache Apache Foundation in the United States. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. A code...

8.3CVSS7.7AI score0.01645EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•10 views

WordPress plugin Property Hive Stamp Duty Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.4CVSS7.9AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•8 views

WordPress plugin Hive Support 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS8.6AI score0.00236EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•12 views

WordPress plugin Hive Support SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS9AI score0.00504EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/12 8:11 p.m.•7 views

WordPress Property Hive Stamp Duty Calculator plugin <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Property Hive Stamp Duty Calculator versions = 1.0.22...

6.4CVSS5.7AI score0.00311EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/12/11 8:41 p.m.•10 views

WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by hunter85 Patchstack Alliance in WordPress Plugin Hive Support versions = 1.1.2...

4.3CVSS7AI score0.00236EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/12/11 7:42 p.m.•12 views

WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Hive Support versions = 1.1.2...

8.5CVSS8.1AI score0.00504EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/10 8:23 a.m.•17 views

CVE-2024-11940 Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter

The Property Hive Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘price’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.9AI score0.00354EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/12/10 8:23 a.m.•35 views

CVE-2024-11940 Property Hive Mortgage Calculator <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter

The Property Hive Mortgage Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘price’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00354EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•17 views

WordPress plugin Property Hive Mortgage Calculator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS8AI score0.00354EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2024/12/09 10:49 p.m.•12 views

WordPress Property Hive Mortgage Calculator plugin <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via price Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via price Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Property Hive Mortgage Calculator versions = 1.0.6...

6.4CVSS5.8AI score0.00354EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/12/05 12:31 p.m.•44 views

Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore

Apache Hive Metastore HMS uses SerializationUtilitiesdeserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution RCE since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be...

8AI score0.01645EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2024/12/05 12:31 p.m.•31 views

GHSA-6HQR-C69M-R76Q Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore

Apache Hive Metastore HMS uses SerializationUtilitiesdeserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution RCE since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be...

8.3CVSS8.6AI score0.01645EPSS
SaveExploits0References6
NVD
NVD
•added 2024/12/05 10:15 a.m.•37 views

CVE-2022-41137

Apache Hive Metastore HMS uses SerializationUtilitiesdeserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution RCE since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be...

8.3CVSS0.01645EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/12/05 10:01 a.m.•11 views

CVE-2022-41137 Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore

Apache Hive Metastore HMS uses SerializationUtilitiesdeserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution RCE since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be...

7.7AI score0.01645EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/12/05 10:01 a.m.•57 views

CVE-2022-41137 Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore

Apache Hive Metastore HMS uses SerializationUtilitiesdeserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution RCE since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be...

0.01645EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/05 10:01 a.m.•17 views

CVE-2022-41137 Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore

Apache Hive Metastore HMS uses SerializationUtilitiesdeserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution RCE since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be...

8.3CVSS7.4AI score
SaveExploits0References8
CVE
CVE
•added 2024/12/05 10:01 a.m.•148 views

CVE-2022-41137

The Apache Hive Metastore (HMS) is vulnerable to Remote Code Execution (RCE) due to the unsafe use of the SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions. The flaw allows for the deserialization of arbitrary data because the method lacks s...

7.3AI score0.01645EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder