Lucene search
K

1885 matches found

Code423n4
Code423n4
added 2023/10/25 12:0 a.m.11 views

M-05 Unmitigated

Lines of code Vulnerability details Original Issue M-05: Reward sandwiching in VotiumStrategy Details The issue outlined above is about making instant profit by depositing before the boost happens and withdrawing right after the boost occurs. Those who locked their positions for 16+ weeks get the...

6.8AI score
Exploits0
OpenVAS
OpenVAS
added 2023/10/25 12:0 a.m.17 views

Fedora: Security Advisory for matrix-synapse (FEDORA-2023-954c2ec5bd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS5.2AI score0.01166EPSS
Exploits0References2
Fedora
Fedora
added 2023/10/24 1:13 a.m.30 views

[SECURITY] Fedora 37 Update: matrix-synapse-1.80.0-7.fc37

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

4.9CVSS5AI score0.01166EPSS
Exploits0
Fedora
Fedora
added 2023/10/20 12:42 a.m.43 views

[SECURITY] Fedora 38 Update: matrix-synapse-1.94.0-2.fc38

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

4.9CVSS5AI score0.01166EPSS
Exploits0
wpexploit
wpexploit
added 2023/10/16 12:0 a.m.148 views

Responsive Pricing Table < 5.1.8 - Admin+ Stored Cross-Site Scriping

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Create a New Pricing Table and Add ...

4.8CVSS5.5AI score0.00436EPSS
Exploits2References1
CNVD
CNVD
added 2023/10/13 12:0 a.m.28 views

Microsoft Skype for Business Remote Code Execution Vulnerability (CNVD-2023-92200)

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...

7.2CVSS8.1AI score0.02428EPSS
Exploits0References1
CNVD
CNVD
added 2023/10/13 12:0 a.m.33 views

Microsoft Skype for Business Remote Code Execution Vulnerability

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...

7.2CVSS8.1AI score0.02458EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/10/07 12:0 a.m.21 views

Fedora: Security Advisory for matrix-synapse (FEDORA-2023-84ee781688)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS4.8AI score0.0065EPSS
Exploits0References2
OSV
OSV
added 2023/10/06 4:15 p.m.2 views

CVE-2023-44243

Cross-Site Request Forgery CSRF vulnerability in Dylan Blokhuis Instant CSS plugin = 1.2.1 versions...

8.8CVSS7.3AI score0.00227EPSS
Exploits0References1
Prion
Prion
added 2023/10/06 4:15 p.m.12 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Dylan Blokhuis Instant CSS plugin = 1.2.1 versions...

6.8CVSS8.8AI score0.00227EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/06 3:2 p.m.8 views

CVE-2023-44243 WordPress Instant CSS Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Dylan Blokhuis Instant CSS plugin = 1.2.1 versions...

4.3CVSS7.4AI score0.00227EPSS
Exploits0References1
CVE
CVE
added 2023/10/06 3:2 p.m.34 views

CVE-2023-44243

CVE-2023-44243 affects the WordPress plugin Instant CSS (versions up to and including 1.2.1). It is a Cross-Site Request Forgery (CSRF) vulnerability that could allow an unauthenticated attacker to trigger admin actions when a user visits a malicious page. Patch: fixed in 1.2.2. Severity is repor...

8.8CVSS6.5AI score0.00227EPSS
Exploits0References1Affected Software1
Fedora
Fedora
added 2023/10/06 1:28 a.m.35 views

[SECURITY] Fedora 38 Update: matrix-synapse-1.93.0-2.fc38

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

4.3CVSS4.4AI score0.0065EPSS
Exploits0
Fedora
Fedora
added 2023/10/06 12:51 a.m.34 views

[SECURITY] Fedora 37 Update: matrix-synapse-1.80.0-6.fc37

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

4.3CVSS4.4AI score0.0065EPSS
Exploits0
CNNVD
CNNVD
added 2023/10/06 12:0 a.m.3 views

WordPress Plugin Instant CSS Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS6.6AI score0.00227EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/10/06 12:0 a.m.3 views

PT-2023-29167 · Dylan Blokhuis · Instant Css

Name of the Vulnerable Software and Affected Versions: Dylan Blokhuis Instant CSS plugin versions = 1.2.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS8.4AI score0.00227EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/10/06 12:0 a.m.16 views

Fedora: Security Advisory for matrix-synapse (FEDORA-2023-5d980e6aaf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS4.8AI score0.0065EPSS
Exploits0References2
OSV
OSV
added 2023/10/04 9:15 a.m.2 views

CVE-2023-44272

A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user...

5.4CVSS5.6AI score0.00444EPSS
Exploits0References4
Prion
Prion
added 2023/10/04 9:15 a.m.11 views

Cross site scripting

A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user...

4.9CVSS5.1AI score0.00444EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/10/04 9:15 a.m.4 views

UBUNTU-CVE-2023-44272

A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user...

5.4CVSS5.7AI score0.00444EPSS
Exploits0References6
Rows per page
Query Builder