Lucene search
+L

24896 matches found

RedhatCVE
RedhatCVE
•added 2025/03/03 9:16 a.m.•22 views

CVE-2024-13697

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nicelinks'. This makes it possible for unauthenticated attackers to make web request...

6.5CVSS8.4AI score0.00284EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/03 9:16 a.m.•21 views

CVE-2024-13611

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attacke...

7.5CVSS8.4AI score0.00499EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•47 views

Linux Distros Unpatched Vulnerability : CVE-2009-4902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the MSGFunctionDemarshall function in winscardsvc.c in the PC/SC Smart Card daemon aka PCSCD in MUSCLE PCSC-Lite 1.5.4 and earlier might allo...

6.8CVSS6AI score0.00394EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•23 views

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when processing front-end messages during allocation...

7.8CVSS6.1AI score0.00088EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/02 3:20 p.m.•41 views

CVE-2025-0895 IBM Cognos Mobile information disclosure

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages...

2.4CVSS0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/02 3:20 p.m.•18 views

CVE-2025-0895 IBM Cognos Mobile information disclosure

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages...

2.4CVSS5.8AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•21 views

IBM Cognos Analytics Mobile security vulnerabilities

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile version 1.1, which originates from debug code log message...

2.4CVSS5.8AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/02 12:00 a.m.•12 views

PT-2025-9213

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Mobile version 1.1 Description The issue allows a user with physical access to the device to obtain sensitive information from debugging code log messages. Recommendations For IBM Cognos Analytics Mobile version 1.1,...

2.4CVSS5.9AI score0.00197EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2025/03/01 3:23 p.m.•39 views

CVE-2024-56496

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

3.3CVSS5.8AI score0.00144EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/01 1:22 p.m.•19 views

CVE-2025-1693

The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database cluster contents can inject control characters into the shell output. This may result in the display of falsified messages that appear to originate from mongosh or the underlying...

3.9CVSS5.9AI score0.00225EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/03/01 9:15 a.m.•24 views

CVE-2024-13697

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nicelinks'. This makes it possible for unauthenticated attackers to make web request...

6.5CVSS8.3AI score0.00284EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/03/01 9:15 a.m.•37 views

CVE-2024-13611

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attacke...

7.5CVSS8.2AI score0.00499EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/01 9:15 a.m.•23 views

CVE-2024-13697

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nicelinks'. This makes it possible for unauthenticated attackers to make web request...

6.5CVSS0.00284EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/01 9:15 a.m.•23 views

CVE-2024-13611

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attacke...

7.5CVSS0.00499EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/01 8:23 a.m.•35 views

CVE-2024-13697 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nicelinks'. This makes it possible for unauthenticated attackers to make web request...

4.8CVSS0.00284EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/01 8:23 a.m.•73 views

CVE-2024-13697

CVE-2024-13697 documents an unauthenticated SSRF in Better Messages for WordPress (plugin versions up to 2.7.4) via the nice_links feature. Exploitation requires Enable link previews (default). The connected docs indicate a patch is available and advise upgrading to a fixed version; no further ex...

6.5CVSS8.3AI score0.00284EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/01 8:23 a.m.•24 views

CVE-2024-13697 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nicelinks'. This makes it possible for unauthenticated attackers to make web request...

4.8CVSS8.3AI score0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/01 8:23 a.m.•18 views

CVE-2024-13611 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attacke...

7.5CVSS8.2AI score0.00499EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/01 12:00 a.m.•21 views

WordPress plugin Better Messages has a vulnerability related to information leakage.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

7.5CVSS8.2AI score0.00499EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/01 12:00 a.m.•35 views

WordPress plugin Better Messages has a code vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

6.5CVSS8.3AI score0.00284EPSS
SaveExploits0References4
Rows per page
Query Builder