Lucene search
+L

1606 matches found

CVE
CVE
added 2022/04/25 3:50 p.m.85 views

CVE-2022-0541

The CVE-2022-0541 issue affects the flo-launch WordPress plugin prior to 2.4.1. The vulnerability arises when the plugin injects code into wp-config.php during clone-site creation, enabling an attacker to start a new WordPress installation by setting the flo_custom_table_prefix cookie. Impact is ...

9.8CVSS9.5AI score0.01677EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2022/04/25 12:0 a.m.8 views

WordPress和WordPress plugin 安全漏洞

WordPress is a blogging platform developed using the PHP language. The WordPress plugin flo-launch version 2.4.1 or earlier is vulnerable to an access control error that originates when the plugin injects code into wp-config.php when creating a clone site. prefix cookie to an arbitrary value to...

9.8CVSS5.8AI score0.01677EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2022/04/25 12:0 a.m.7 views

PT-2022-13251 · WordPress · Flo-Launch

Name of the Vulnerable Software and Affected Versions: flo-launch WordPress plugin versions prior to 2.4.1 Description: The issue allows an attacker to initiate a new site install by setting the flo custom table prefix cookie to an arbitrary value. This is possible because the plugin injects code...

9.8CVSS9.4AI score0.01677EPSS
SaveExploits2References3
OSV
OSV
added 2022/04/22 4:15 p.m.7 views

CVE-2022-29583

servicewindows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intended directory. NOTE: this finding could not be reproduced by its original reporter or by others...

7.8CVSS5.8AI score0.00306EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/22 4:15 p.m.3 views

CVE-2022-29583

servicewindows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intended directory. NOTE: this finding could not be reproduced by its original reporter or by others...

7.8CVSS6.1AI score0.00306EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/22 1:35 p.m.51 views

Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2021-22898)

Summary Security Vulnerabilities affect IBM Cloud Private - curl Vulnerability Details CVEID: CVE-2021-22898 DESCRIPTION: cURL libcurl could allow a remote attacker to obtain sensitive information, caused by a flaw in the option parser for sending NEWENV variables. By sending a specially-crafted...

3.1CVSS0.7AI score0.04385EPSS
SaveExploits1Affected Software1
Citrix
Citrix
added 2022/04/21 12:0 a.m.12 views

Session launch might fail on a endpoint device in a closed network if the Secure ICA file session launch policy is enabled.

Session launch might fail with the following error on a endpoint device in a closed network if the Secure ICA file session launch policy is enabled. Error: "Cannot Start App. Please contact your help desk."...

7AI score
SaveExploits0
Citrix
Citrix
added 2022/04/19 12:0 a.m.14 views

CWA 2202 : Published desktop fails to launch when CWA is used

-- Issue with CWA only -- Same endpoint works when same VDA is launched from Store URL -- Issue with 1 end point only -- Never worked on the CWA -- First time set up Details...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.8 views

Dell Technologies Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS has a security vulnerability that could be exploited by an attacker to gain access to sensitive information and use it to launch further attacks on the affected system...

5.5CVSS5.3AI score0.00474EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/11 8:15 p.m.7 views

CVE-2022-27826

Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

7.8CVSS5.8AI score0.00155EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.4 views

CVE-2022-27826

Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

8.5CVSS7.1AI score0.00155EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.4 views

CVE-2022-27828

Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

8.5CVSS7.1AI score0.00136EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.3 views

CVE-2022-27829

Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

8.5CVSS7.1AI score0.00134EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/11 8:15 p.m.7 views

CVE-2022-27830

Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

7.8CVSS7.1AI score0.00134EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/11 8:15 p.m.8 views

CVE-2022-27828

Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

7.8CVSS7.1AI score0.00136EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/11 8:15 p.m.6 views

CVE-2022-27829

Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

7.8CVSS7.1AI score0.00134EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/11 8:15 p.m.20 views

Input validation

Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

7.2CVSS7.5AI score0.00155EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/11 7:37 p.m.25 views

CVE-2022-27829

Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

8.5CVSS8.6AI score0.00134EPSS
SaveExploits0References1
Citrix
Citrix
added 2022/04/08 12:0 a.m.11 views

"Unable to Launch Resource" error while switching to HTML5 client

With App protection enabled, if you switch to HTML5 client mid-way into the session/ beginning of the session all the protected and unprotected apps will be enumerated but when you click on launching the session, the below message will appear,which will lead to this document...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2022/04/08 12:0 a.m.14 views

Web Extension Required error when launching resources via HTML5 mode

You are not able to launch resources apps or desktops from browser due to a lack of web extension. If you see this modal dialog and are not able to launch application protected resource...

7.1AI score
SaveExploits0
Rows per page
Query Builder