Lucene search
+L

7693 matches found

Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.14 views

PT-2025-22169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue in the Linux kernel has been identified, specifically in the ivpu job submit function. This occurs due to an incorrect locking order when a thread aborts currently...

9.8CVSS6.4AI score0.20703EPSS
SaveExploits1References147
NVD
NVD
added 2025/01/07 8:15 p.m.17 views

CVE-2025-0218

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

7.1CVSS0.00174EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/07 5:38 p.m.11 views

WordPress WP Job Portal plugin <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability

WordPress WP Job Portal plugin = 2.2.5- Authenticated Subscriber+ Insecure Direct Object Reference vulnerability discovered by Apostolos Sakellariou in WordPress Plugin WP Job Portal versions = 2.2.5...

4.3CVSS7AI score0.00314EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/01/07 4:15 p.m.10 views

CVE-2025-22294

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Reflected XSS.This issue affects Custom Field For WP Job Manager: from n/a through = 1.3...

7.1CVSS0.00427EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/07 1:15 p.m.9 views

CVE-2024-12131

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS7.3AI score0.00314EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/07 1:15 p.m.25 views

CVE-2024-12131

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00314EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/07 12:43 p.m.32 views

CVE-2024-12131 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00314EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/07 12:43 p.m.13 views

CVE-2024-12131 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS6.8AI score0.00314EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/07 12:43 p.m.63 views

CVE-2024-12131

CVE-2024-12131 affects the WordPress plugin “WP Job Portal – A Complete Recruitment System for Company or Job Board website” (WordPress plugin). The issue is an Insecure Direct Object Reference caused by missing validation on a user-controlled key, enabling authenticated attackers with Subscriber...

4.3CVSS4.3AI score0.00314EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.9 views

WordPress plugin JobBoard Job listing 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

10CVSS8.6AI score0.00529EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.10 views

WordPress plugin Custom Field For WP Job Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS7.5AI score0.00427EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.9 views

WordPress plugin WP Job Portal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.2AI score0.00314EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/07 12:00 a.m.13 views

PT-2025-4409 · Wp Job Manager · Gravity Master Custom Field For Wp Job Manager

Name of the Vulnerable Software and Affected Versions: Gravity Master Custom Field For WP Job Manager versions n/a through 1.3 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Reflected XSS. This mea...

7.1CVSS6.2AI score0.00427EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2025/01/06 4:31 p.m.12 views

WordPress Custom Field For WP Job Manager plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Custom Field For WP Job Manager versions = 1.3...

7.1CVSS6.1AI score0.00427EPSS
SaveExploits1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/04 12:00 a.m.15 views

The vulnerability of the _all_edits.php (/_parse/_all_edits.php) script in the Job Recruitment system allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the alledits.php /parse/alledits.php script in the Job Recruitment system relates to the failure to neutralize special elements during the processing of the skillset parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized acces...

7.5CVSS7.6AI score0.00612EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/04 12:00 a.m.12 views

The vulnerability of the edit_jobpost() function in the _all_edits.php (/_parse/_all_edits.php) script of the Job Recruitment system allows a hacker to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the editjobpost function in the alledits.php /parse/alledits.php script of the Job Recruitment system is related to the lack of measures taken to neutralize special elements during the processing of the jobtype parameter. Exploiting this vulnerability could allow an attacker,...

7.5CVSS7.6AI score0.00611EPSS
SaveExploits1References6Affected Software1
Patchstack
Patchstack
added 2025/01/03 11:16 a.m.8 views

WordPress JobBoard Job listing plugin <= 1.2.6 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin JobBoard Job listing versions = 1.2.6...

10CVSS7AI score0.00529EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/03 9:15 a.m.13 views

CVE-2024-12132

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00376EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/03 8:22 a.m.66 views

CVE-2024-12132

CVE-2024-12132 - WP Job Portal (WordPress) vulnerability : The WP Job Portal – A Complete Recruitment System plugin for WordPress is vulnerable to insecure direct object references in all versions up to 2.2.4 due to missing validation on a user-controlled key. This enables authenticated attackers...

4.3CVSS4.3AI score0.00376EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/01/03 8:22 a.m.25 views

CVE-2024-12132 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00376EPSS
SaveExploits0References2
Rows per page
Query Builder