Lucene search
K

1885 matches found

Cvelist
Cvelist
added 2024/12/16 2:31 p.m.20 views

CVE-2024-54361 WordPress Instant Appointment plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tenteeglobal Instant Appointment instant-appointment allows SQL Injection.This issue affects Instant Appointment: from n/a through = 1.2...

9.3CVSS0.00513EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/16 12:0 a.m.19 views

WordPress plugin Instant Appointment SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.2AI score0.00513EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/12/13 3:15 p.m.3 views

CVE-2023-38483

Missing Authorization vulnerability in dylanblokhuis Instant CSS instant-css allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through = 1.1.4...

5.4CVSS5.8AI score0.00422EPSS
Exploits0References3
NVD
NVD
added 2024/12/13 3:15 p.m.8 views

CVE-2023-38483

Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through 1.1.4...

5.4CVSS0.00422EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:23 p.m.6 views

CVE-2023-38483 WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in dylanblokhuis Instant CSS instant-css allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through = 1.1.4...

5.4CVSS6.9AI score0.00422EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 2:23 p.m.49 views

CVE-2023-38483 WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through 1.1.4...

5.4CVSS0.00422EPSS
Exploits0References1
Fedora
Fedora
added 2024/12/13 1:37 a.m.19 views

[SECURITY] Fedora 40 Update: matrix-synapse-1.111.1-3.fc40

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

9.1CVSS7.2AI score0.00701EPSS
Exploits0
Fedora
Fedora
added 2024/12/13 1:35 a.m.42 views

[SECURITY] Fedora 41 Update: matrix-synapse-1.118.0-3.fc41

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

9.1CVSS6.4AI score0.00701EPSS
Exploits0
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.2 views

WordPress plugin Instant CSS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS8.5AI score0.00422EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.4 views

PT-2024-12732 · Unknown · Instant Css

Name of the Vulnerable Software and Affected Versions: Instant CSS versions 1.1.4 and earlier Description: The issue is related to missing authorization, allowing exploitation of incorrectly configured access control security levels. This is a broken access control issue that can be exploited by...

5.4CVSS9.4AI score0.00422EPSS
Exploits0References9
Patchstack
Patchstack
added 2024/12/12 9:30 a.m.3 views

WordPress Instant Appointment plugin <= 1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Instant Appointment versions = 1.2...

9.3CVSS8.1AI score0.00513EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.1 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to execute arbitrary commands

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of restrictions on the loading of files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS8.4AI score0.01161EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.2 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to execute arbitrary commands

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of restrictions on the loading of files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS8.4AI score0.01161EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.2 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to escalate their privileges and execute arbitrary commands.

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary comman...

9CVSS8.3AI score0.01749EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.3 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized acces...

6.8CVSS8AI score0.00893EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.3 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code b...

9CVSS8.5AI score0.014EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.3 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code b...

10CVSS8.5AI score0.01979EPSS
Exploits0References4Affected Software2
CNNVD
CNNVD
added 2024/11/23 12:0 a.m.4 views

WordPress plugin 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS7.7AI score0.00433EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/11/23 12:0 a.m.2 views

PT-2024-16842 · WordPress · 워드프레스 결제 심플페이 – 우커머스 결제 플러그인

Name of the Vulnerable Software and Affected Versions: 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 versions up to, and including, 5.1.4 Description: The issue is related to Stored Cross-Site Scripting via the plugin's pafw instant payment shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS7.9AI score0.00433EPSS
Exploits0References6
NVD
NVD
added 2024/11/20 2:15 p.m.7 views

CVE-2024-9479

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

10CVSS0.00388EPSS
Exploits0References1
Rows per page
Query Builder