Lucene search
+L

252 matches found

Positive Technologies
Positive Technologies
added 2024/04/24 12:00 a.m.11 views

PT-2024-24882 · Unknown · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.9 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations: For versions through 5.7.9,...

8.8CVSS6.5AI score0.00448EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/12 1:15 p.m.8 views

CVE-2024-31362

Cross-Site Request Forgery CSRF vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

8.8CVSS5.8AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/12 1:15 p.m.20 views

CVE-2024-31362

Cross-Site Request Forgery CSRF vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

8.8CVSS4.6AI score0.00227EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/12 12:22 p.m.55 views

CVE-2024-31362

CVE-2024-31362 is a CSRF vulnerability in ProfileGrid (Metagauss) affecting ProfileGrid versions up to 5.7.8. NVD CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no user privileges, and required user interaction. Public remediation details are not provided in the documents; PatchStack...

8.8CVSS5.1AI score0.00227EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/12 12:22 p.m.27 views

CVE-2024-31362 WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

4.3CVSS5AI score0.00227EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/12 12:00 a.m.7 views

PT-2024-24007 · Metagauss · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.8 Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to perform unintended actions on a user's account. Recommendations: For versions...

8.8CVSS7.1AI score0.00227EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/11 1:24 a.m.7 views

CVE-2024-25935

Missing Authorization vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.2.5.9...

9.8CVSS5.8AI score0.00402EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/11 1:24 a.m.17 views

CVE-2024-25935

Missing Authorization vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.2.5.9...

9.8CVSS4.7AI score0.00402EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/07 6:15 p.m.9 views

CVE-2024-31291

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.6...

7.1CVSS5.8AI score0.00379EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/07 6:15 p.m.24 views

CVE-2024-31291

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.6...

7.1CVSS4.7AI score0.00379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/07 6:08 p.m.13 views

CVE-2024-31291 WordPress ProfileGrid plugin <= 5.7.6 - IDOR on Friend Request vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.6...

4.3CVSS8.6AI score0.00379EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/07 6:08 p.m.65 views

CVE-2024-31291

CVE-2024-31291 is an Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid, affecting ProfileGrid versions up to 5.7.6 (listed as vulnerable in Red Hat CVE entry). The Red Hat page explicitly names the issue and affected product/version, but the provided document...

7.1CVSS8.6AI score0.00379EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/07 6:08 p.m.29 views

CVE-2024-31291 WordPress ProfileGrid plugin <= 5.7.6 - IDOR on Friend Request vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.6...

4.3CVSS5AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/07 12:00 a.m.6 views

PT-2024-23938 · Metagauss · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.6 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations: For versions through 5.7.6,...

7.1CVSS9.2AI score0.00379EPSS
SaveExploits0References5
NVD
NVD
added 2024/03/29 4:15 p.m.14 views

CVE-2024-30513

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2...

6.5CVSS6.5AI score0.00455EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/29 4:15 p.m.7 views

CVE-2024-30513

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2...

6.5CVSS5.8AI score0.00455EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/29 3:50 p.m.15 views

CVE-2024-30513 WordPress ProfileGrid plugin <= 5.7.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2...

6.5CVSS6.9AI score0.00455EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/29 3:50 p.m.74 views

CVE-2024-30513

CVE-2024-30513 weakly documented in the provided sources is described as an Authorization Bypass Through User-Controlled Key in ProfileGrid (Metagauss ProfileGrid), affecting ProfileGrid versions up to 5.7.2. Connected documents corroborate the authorisation bypass context and link to PatchStack ...

6.5CVSS8.6AI score0.00455EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/03/29 2:15 p.m.9 views

CVE-2024-30490

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

9.8CVSS5.8AI score0.02248EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/29 2:15 p.m.25 views

CVE-2024-30490

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

9.8CVSS9.7AI score0.02248EPSS
SaveExploits0References1
Rows per page
Query Builder