Lucene search
+L

4751 matches found

CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•21 views

WordPress plugin CGC Maintenance Mode 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

3.7CVSS8.4AI score0.00479EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•4 views

CVE-2024-32708: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in helderk Maintenance Mode allows Functionality Bypass.This issue affects Maintenance Mode: from n/a through 3.0.1...

3.7CVSS5.8AI score0.00373EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•23 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.00185EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•21 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.00373EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•23 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.00382EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•18 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.00328EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•23 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.0036EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•20 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.00197EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•25 views

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, ...

6.4CVSS7.2AI score0.00346EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
•added 2024/05/07 12:00 a.m.•17 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a series of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR May-2024 Release 1, which stems from a SNAP out-of-bounds write vulnerability in the HAL...

6.7CVSS6.8AI score0.00192EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2024/05/04 12:00 a.m.•355 views

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclosure

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 0.01 Revision 0 Summary: The REBLE610 features an accurate hardware design, absence of internal cabling and full modularity. The unit is composed by a...

5.3AI score
SaveExploits0
WPVulnDB
WPVulnDB
•added 2024/05/03 12:00 a.m.•17 views

Maintenance Mode by helderk < 3.0.2 - Unauthenticated IP Spoofing

Description The Maintenance Mode plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 3.0.1 due to insufficient IP address validation. This makes it possible for unauthenticated attackers to spoof their IP Address...

3.7CVSS7AI score0.00373EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2024/05/01 12:00 a.m.•23 views

Smart Maintenance Mode <= 1.4.4 - Cross-Site Request Forgery

Description The Smart Maintenance Mode plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized...

5.4CVSS6.7AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/26 8:15 a.m.•31 views

CVE-2024-33638

Cross-Site Request Forgery CSRF vulnerability in Brijesh Kothari Smart Maintenance Mode.This issue affects Smart Maintenance Mode: from n/a through 1.4.4...

5.4CVSS5.5AI score0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/26 7:12 a.m.•18 views

CVE-2024-33638 WordPress Smart Maintenance Mode plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Brijesh Kothari Smart Maintenance Mode.This issue affects Smart Maintenance Mode: from n/a through 1.4.4...

5.4CVSS5.1AI score0.00209EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/26 7:12 a.m.•85 views

CVE-2024-33638

CVE-2024-33638 is a CSRF vulnerability in Brijesh Kothari Smart Maintenance Mode for WordPress, affecting Smart Maintenance Mode versions from n/a through 1.4.4. The available documents provide the vulnerability description but do not specify the root cause details, affected functions, exploit me...

5.4CVSS5.1AI score0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•3 views

PT-2024-25398

Name of the Vulnerable Software and Affected Versions Brijesh Kothari Smart Maintenance Mode versions 1.4.4 and earlier Description A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web...

5.4CVSS5.7AI score0.00209EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•19 views

WordPress plugin Smart Maintenance Mode 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

5.4CVSS6.5AI score0.00209EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•3 views

CVE-2024-33638: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Brijesh Kothari Smart Maintenance Mode.This issue affects Smart Maintenance Mode: from n/a through 1.4.4...

5.4CVSS5.8AI score0.00209EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/25 5:38 p.m.•17 views

WordPress Smart Maintenance Mode plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by LeNgocHoa Patchstack Alliance in WordPress Plugin Smart Maintenance Mode versions = 1.5.3...

5.4CVSS7AI score0.00209EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder