Lucene search
+L

6138 matches found

CNNVD
CNNVD
•added 2025/01/25 12:00 a.m.•21 views

IBM Analytics Content Hub 安全漏洞

IBM Analytics Content Hub is a clean streaming experience from International Business Machines IBM that visualizes relevant analytics by extracting content from IBM and other analytics providers. A security vulnerability exists in IBM Analytics Content Hub version 2.0. An attacker exploiting this...

5.3CVSS6.2AI score0.00373EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/25 12:00 a.m.•21 views

PT-2025-2551

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub version 2.0 Description: The issue is related to a buffer overflow in the IBM Analytics Content Hub due to improper return length checking. This can be exploited by a remote authenticated attacker to execute arbitrar...

9CVSS7.8AI score0.00713EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/25 12:00 a.m.•3 views

CVE-2024-39750: Buffer Copy without Checking Size of Input

IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash...

8.8CVSS6.6AI score0.00713EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/25 12:00 a.m.•7 views

CVE-2024-35134: Generation of Error Message Containing Sensitive Information

IBM Analytics Content Hub 2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

5.3CVSS5.9AI score0.00373EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/25 12:00 a.m.•26 views

PT-2025-2430 · Ibm · Ibm Analytics Content Hub

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub version 2.0 Description: The issue is related to the mechanism of forming error reports in IBM Analytics Content Hub, which could allow a remote attacker to obtain sensitive information when a detailed technical erro...

5.3CVSS6.2AI score0.00373EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2025/01/24 8:06 a.m.•22 views

WordPress Automate Hub Free by Sperse.IO plugin <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update vulnerability

Cross-Site Request Forgery to Activation Status Update vulnerability discovered by Dhabaleshwar Das in WordPress Plugin Automate Hub versions = 1.7.0...

4.3CVSS7AI score0.00189EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2025/01/24 7:15 a.m.•18 views

CVE-2024-13683

The Automate Hub Free by Sperse.IO plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.0. This is due to missing or incorrect nonce validation on the 'automatehub' page. This makes it possible for unauthenticated attackers to update an...

4.3CVSS7.2AI score0.00189EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/24 7:04 a.m.•36 views

CVE-2024-13683 Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update

The Automate Hub Free by Sperse.IO plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.0. This is due to missing or incorrect nonce validation on the 'automatehub' page. This makes it possible for unauthenticated attackers to update an...

4.3CVSS0.00189EPSS
SaveExploits0References3
CVE
CVE
•added 2025/01/24 7:04 a.m.•74 views

CVE-2024-13683

CVE-2024-13683 – Automate Hub Free by Sperse.IO (WordPress) Impact: Cross-Site Request Forgery (CSRF) on the Automate Hub page could allow unauthenticated attackers to update an activation status if a site administrator is tricked into performing an action. Root cause: missing or incorrect nonce ...

4.3CVSS6.5AI score0.00189EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/24 7:04 a.m.•10 views

CVE-2024-13683 Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update

The Automate Hub Free by Sperse.IO plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.0. This is due to missing or incorrect nonce validation on the 'automatehub' page. This makes it possible for unauthenticated attackers to update an...

4.3CVSS5.3AI score0.00189EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•20 views

WordPress plugin Automate Hub Free by Sperse.IO 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Automate Hub Free by...

4.3CVSS8.5AI score0.00189EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•5 views

CVE-2024-13683: Cross-Site Request Forgery (CSRF)

The Automate Hub Free by Sperse.IO plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.0. This is due to missing or incorrect nonce validation on the 'automatehub' page. This makes it possible for unauthenticated attackers to update an...

4.3CVSS5.5AI score0.00189EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/23 10:56 p.m.•19 views

WordPress Automate Hub Free by Sperse.IO plugin <= 1.7.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Automate Hub versions = 1.7.0...

6.1CVSS6.3AI score0.0049EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/23 12:00 a.m.•19 views

PT-2025-2244 · Sperse.Io · Automate Hub Free

Name of the Vulnerable Software and Affected Versions: Automate Hub Free by Sperse.IO plugin for WordPress versions up to and including 1.7.0 Description: The issue is due to missing or incorrect nonce validation on the 'automate hub' page, making it possible for unauthenticated attackers to upda...

4.3CVSS7.1AI score0.00189EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2025/01/22 1:32 a.m.•27 views

Important: Red Hat Security Advisory: Red Hat multicluster global hub 1.3.2 enhancements and container updates

Red Hat multicluster global hub 1.3.2 general availability and release images provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...

9.1CVSS6.7AI score0.03181EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•5 views

PT-2025-8888

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been resolved, related to the USB hub driver. The issue occurs when a non-compliant device with multiple configurations or interfaces is...

5.5CVSS0.0028EPSS
SaveExploits0
osv_cve
osv_cve
•added 2025/01/21 6:15 p.m.•36 views

CVE-2025-24456

In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping...

8.8CVSS5.8AI score0.00287EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/21 6:15 p.m.•35 views

CVE-2025-24456

In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping...

8.8CVSS0.00287EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/21 5:23 p.m.•12 views

CVE-2025-24456

In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping...

6.7CVSS7.5AI score0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/21 5:23 p.m.•31 views

CVE-2025-24456

In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping...

6.7CVSS0.00287EPSS
SaveExploits0References1
Rows per page
Query Builder