Lucene search
K

1037 matches found

Cvelist
Cvelist
added 2024/12/06 1:5 p.m.21 views

CVE-2024-53817 WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n/a through = 1.5.8...

7.6CVSS0.00423EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.1 views

WordPress plugin Product Labels For Woocommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress...

7.6CVSS8.7AI score0.00423EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/12/02 11:35 a.m.2 views

WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin Product Labels For Woocommerce versions = 1.5.8...

7.6CVSS8.1AI score0.00423EPSS
Exploits0Affected Software1
RedHat Linux
RedHat Linux
added 2024/11/12 9:11 a.m.3 views

kernel: powerpc/64s: fix program check interrupt emergency stack path

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: fix program check interrupt emergency stack path Emergency stack path was jumping into a 3: label inside the GENCOMMONBODY macro for the normal path after it had finished, rather than jumping over it. By a small...

5.5CVSS6.8AI score0.00222EPSS
Exploits0References5
OSV
OSV
added 2024/11/01 3:15 p.m.3 views

CVE-2024-43310

Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through 3.4.9...

8.8CVSS5.8AI score0.00528EPSS
Exploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.54 views

CVE-2024-43310

CVE-2024-43310 corresponds to a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin “Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce” (also seen as UkrSolution Print Barcode Labels for your WooCommerce). Affected versions...

8.8CVSS7.1AI score0.00528EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.10 views

CVE-2024-43310 WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through 3.4.9...

6.5CVSS7.2AI score0.00528EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.35 views

CVE-2024-43310 WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through 3.4.9...

6.5CVSS0.00528EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.3 views

WordPress plugin Print Barcode Labels for your WooCommerce products/orders 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin Print Barcode...

8.8CVSS6.5AI score0.00528EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/07 12:0 a.m.3 views

Discourse 安全漏洞

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes features such as communities, email and chat rooms. A security vulnerability exists in Discourse that stems from allowing users to view topics with hidden labels with knowledge of the...

5.3CVSS6.4AI score0.00318EPSS
Exploits0References2
NVD
NVD
added 2024/10/05 3:15 p.m.11 views

CVE-2024-47622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through = 2.01...

6.5CVSS0.00237EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/05 2:36 p.m.18 views

CVE-2024-47622 WordPress Advanced Woo Labels plugin <= 2.01 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through = 2.01...

6.5CVSS0.00237EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/05 2:36 p.m.11 views

CVE-2024-47622 WordPress Advanced Woo Labels plugin <= 2.01 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through 2.01...

6.5CVSS6.8AI score0.00237EPSS
Exploits0References1
CVE
CVE
added 2024/10/05 2:36 p.m.40 views

CVE-2024-47622

CVE-2024-47622 affects WordPress plugin Advanced Woo Labels (versions n/a through 2.01). The issue is a Stored XSS caused by improper input handling during web page generation. Exploitation could occur when user-supplied input is not properly neutralized before rendering. A fix is available: upda...

6.5CVSS5.9AI score0.00237EPSS
Exploits0References1
OSV
OSV
added 2024/10/05 3:15 a.m.3 views

CVE-2024-9528

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form label fields in all versions up to, and including, 5.1.19 due to insufficient input sanitization and output escaping. This makes it...

4.8CVSS5.9AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/10/05 12:0 a.m.5 views

PT-2024-32679 · Unknown · Illid Advanced Woo Labels

Name of the Vulnerable Software and Affected Versions: ILLID Advanced Woo Labels versions n/a through 2.01 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which occurs due to...

6.5CVSS6.6AI score0.00237EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/10/05 12:0 a.m.3 views

WordPress plugin Advanced Woo Labels 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS6.2AI score0.00237EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/09/30 11:21 a.m.3 views

WordPress Advanced Woo Labels plugin <= 2.01 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Advanced Woo Labels versions = 2.01...

6.5CVSS6.1AI score0.00237EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/09/30 12:0 a.m.8 views

WordPress Advanced Woo Labels Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Woo Labels Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47622 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9dc287c181e2 Credits savphill Required privilege...

6.5CVSS6.5AI score0.00237EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/09/17 7:48 a.m.26 views

SUSE-SU-2024:3288-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: - Require Go 1.20 for building - Bump go-retryablehttp to version 0.7.7 CVE-2024-6104, bsc1227038 - Migrate from disabled to manual service mode - Add0003-Bump-go-retryablehttp.patch - Update to 2.45.6 jscPED-3577:...

7.5CVSS7.5AI score0.04561EPSS
Exploits0References9
Rows per page
Query Builder