Lucene search
+L

7908 matches found

NVD
NVD
added 2024/05/17 7:15 a.m.20 views

CVE-2023-33310

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Valiano Unite Gallery Lite allows PHP Local File Inclusion.This issue affects Unite Gallery Lite: from n/a through 1.7.59...

6CVSS6AI score0.0068EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/17 6:45 a.m.31 views

CVE-2023-33310 WordPress Unite Gallery Lite plugin <= 1.7.59 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Valiano Unite Gallery Lite allows PHP Local File Inclusion.This issue affects Unite Gallery Lite: from n/a through 1.7.59...

6CVSS6AI score0.0068EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/17 6:45 a.m.59 views

CVE-2023-33310

CVE-2023-33310 affects Unite Gallery Lite for WordPress (

6CVSS6.8AI score0.0068EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/17 6:45 a.m.18 views

CVE-2023-33310 WordPress Unite Gallery Lite plugin <= 1.7.59 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Valiano Unite Gallery Lite allows PHP Local File Inclusion.This issue affects Unite Gallery Lite: from n/a through 1.7.59...

6CVSS6.9AI score0.0068EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/17 6:07 a.m.34 views

CVE-2024-34567 WordPress Easy Notify Lite plugin <= 1.1.29 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in GhozyLab, Inc. Popup Builder allows Stored XSS.This issue affects Popup Builder: from n/a through 1.1.29...

6.5CVSS6.1AI score0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/17 6:07 a.m.22 views

CVE-2024-34567 WordPress Easy Notify Lite plugin <= 1.1.29 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in GhozyLab, Inc. Popup Builder allows Stored XSS.This issue affects Popup Builder: from n/a through 1.1.29...

5.9CVSS6.8AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/17 12:00 a.m.18 views

PT-2024-23404 · Lionscripts · Lionscripts Ip Blocker Lite

Name of the Vulnerable Software and Affected Versions: LionScripts IP Blocker Lite versions prior to 11.1.1 Description: The issue is related to an Authentication Bypass by Spoofing, allowing functionality bypass. Recommendations: For versions prior to 11.1.1, update to version 11.1.1 or later to...

5.3CVSS9.5AI score0.00536EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/05/17 12:00 a.m.9 views

WordPress plugin IP Blocker Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS8.4AI score0.00536EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/17 12:00 a.m.8 views

WordPress plugin Unite Gallery Lite 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

6CVSS8.9AI score0.0068EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/16 9:16 p.m.9 views

CVE-2024-21837

Uncontrolled search path in some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.3CVSS5.8AI score0.00184EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/16 9:16 p.m.10 views

CVE-2024-21809

Improper conditions check for some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/16 9:16 p.m.30 views

CVE-2024-21809

Improper conditions check for some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.3CVSS6.8AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/16 8:47 p.m.48 views

CVE-2024-21809

Improper conditions check for some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.8AI score0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/05/16 1:45 a.m.15 views

WordPress Elementor Header & Footer Builder plugin <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.28...

6.4CVSS5.8AI score0.00357EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/16 12:00 a.m.10 views

PT-2024-19067 · Intel · Intel Quartus Prime Lite Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Lite Edition Design software versions prior to 23.1 Description: The issue is related to an improper conditions check in the software, which may allow an authenticated user to potentially enable escalation of privilege v...

7.3CVSS7.3AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/05/16 12:00 a.m.12 views

PT-2024-19084 · Intel · Intel Quartus Prime Lite Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Lite Edition Design software versions prior to 23.1 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege vi...

7.3CVSS7.3AI score0.00184EPSS
SaveExploits0References3
RustSec
RustSec
added 2024/05/15 12:00 p.m.11 views

Tor path lengths too short when "Vanguards lite" configured

Description When building anonymizing circuits to or from an onion service with 'lite' vanguards the default enabled, the circuit manager code would build the circuits with one hop too few. Impact This makes users of this code more vulnerable to some kinds of traffic analysis when they run or vis...

6.2CVSS7.2AI score0.00186EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.11 views

PT-2024-26429 · Tor · Tor Arti +1

Name of the Vulnerable Software and Affected Versions: Tor Arti versions prior to 1.2.3 Description: The issue arises when building anonymizing circuits to or from an onion service with 'lite' or 'full' vanguards enabled, where the circuit manager code builds the circuits with one hop too few. Th...

7.3CVSS7.4AI score0.00298EPSS
SaveExploits0References22
NVD
NVD
added 2024/05/14 3:43 p.m.22 views

CVE-2024-4413

The Hotel Booking Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.11.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable plugi...

9.8CVSS9.7AI score0.00852EPSS
SaveExploits0References3
NVD
NVD
added 2024/05/14 3:42 p.m.22 views

CVE-2024-3722

The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajaxhandler function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retriev...

5.4CVSS5.6AI score0.00413EPSS
SaveExploits0References3
Rows per page
Query Builder