Lucene search
+L

180 matches found

Vulnrichment
Vulnrichment
added 2025/04/11 8:42 a.m.3 views

CVE-2025-31041 WordPress AnyTrack Affiliate Link Manager <= 1.0.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in NotFound AnyTrack Affiliate Link Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AnyTrack Affiliate Link Manager: from n/a through 1.0.4...

7.5CVSS6.9AI score0.0054EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/11 12:0 a.m.5 views

WordPress plugin AnyTrack Affiliate Link Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.9AI score0.0054EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/04/09 5:45 p.m.9 views

WordPress AnyTrack Affiliate Link Manager plugin <= 1.0.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by timomangcut in WordPress Plugin AnyTrack Affiliate Link Manager versions = 1.0.4...

7.5CVSS8.3AI score0.0054EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 3:25 a.m.8 views

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS7.3AI score0.00376EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:9 p.m.12 views

CVE-2024-0715

Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Manager: before 8.8.7-03...

9.8CVSS7.4AI score0.00457EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/29 12:0 a.m.9 views

PT-2025-4061 · WordPress · The Clickwhale – Link Manager

Name of the Vulnerable Software and Affected Versions: The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to Stored Cross-Site Scripting via link titles due to...

6.4CVSS8.1AI score0.00245EPSS
Exploits0References6
OSV
OSV
added 2025/01/11 3:15 a.m.4 views

CVE-2024-11327

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS7.4AI score0.00345EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/11 12:0 a.m.7 views

PT-2025-1637 · WordPress · The Clickwhale – Link Manager

Name of the Vulnerable Software and Affected Versions: ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add...

6.1CVSS6.6AI score0.00345EPSS
Exploits0References8
OSV
OSV
added 2025/01/07 11:15 a.m.5 views

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages allows Blind SQL Injection.This issue affects ClickWhale – Link Manager, Link Shortener and...

8.5CVSS7.3AI score0.00376EPSS
Exploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.8 views

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS0.00376EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 10:49 a.m.58 views

CVE-2024-51715

CVE-2024-51715 is a SQL injection vulnerability in ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages (ClickWhale plugin for WordPress). Connected sources confirm an authenticated (Contributor+) SQL Injection impact, affecting versions up to 2.4.1 (no n/a...

8.5CVSS7.3AI score0.00376EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/07 10:49 a.m.21 views

CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS0.00376EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:49 a.m.9 views

CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS7.3AI score0.00376EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/02 12:0 a.m.6 views

The vulnerability of the software tools for managing identification and access control, as well as the ID Link Manager and the resource planning software FUJITSU Software TIME CREATOR, allows a perpetrator to gain unauthorized access to read and modify confidential information.

The vulnerability of the software tools for managing identification and access to the ID Link Manager, as well as the resource planning software FUJITSU Software TIME CREATOR, is related to the lack of authentication checks for a critical function. Exploiting this vulnerability could allow an...

5.5CVSS7.6AI score0.00438EPSS
Exploits0References5Affected Software3
NVD
NVD
added 2024/06/18 6:15 a.m.28 views

CVE-2024-33620

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...

8.6CVSS0.00678EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/18 5:44 a.m.22 views

CVE-2024-34024

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...

7.4AI score0.00359EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/18 5:44 a.m.51 views

CVE-2024-34024

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not...

0.00359EPSS
Exploits0References2
CVE
CVE
added 2024/06/18 5:44 a.m.68 views

CVE-2024-34024

CVE-2024-34024 is a vulnerability in ID Link Manager and FUJITSU Software TIME CREATOR where an unauthenticated attacker can determine whether a username is valid due to an observable response discrepancy. Affected products/versions (per sources) include: ID Link Manager II ≤1.8, ID Link Manager ...

6.3CVSS7.2AI score0.00359EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/18 5:44 a.m.50 views

CVE-2024-33620

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...

0.00678EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/18 5:44 a.m.14 views

CVE-2024-33620

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...

7AI score0.00678EPSS
Exploits0References2
Rows per page
Query Builder