Lucene search
+L

499 matches found

RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.3 views

CVE-2025-54679

Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free neon-channel-product-customizer-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Neon Channel Product Customizer Free: from n/a through = 2.0...

7.5CVSS5.9AI score0.00382EPSS
Exploits0References1
NVD
NVD
added 2025/08/14 11:15 a.m.3 views

CVE-2025-54679

Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free neon-channel-product-customizer-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Neon Channel Product Customizer Free: from n/a through = 2.0...

7.5CVSS0.00382EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.13 views

CVE-2025-54679 WordPress Neon Channel Product Customizer Free Plugin <= 2.0 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free neon-channel-product-customizer-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Neon Channel Product Customizer Free: from n/a through = 2.0...

7.5CVSS0.00382EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.2 views

CVE-2025-54679 WordPress Neon Channel Product Customizer Free Plugin <= 2.0 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Neon Channel Product Customizer Free: from n/a through 2.0...

7.5CVSS7.1AI score0.00382EPSS
Exploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.19 views

CVE-2025-54679

CVE-2025-54679 relates to the Neon Channel Product Customizer Free WordPress plugin (versions

7.5CVSS5.9AI score0.00382EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/08/14 7:22 a.m.5 views

WordPress Neon Channel Product Customizer Free Plugin <= 2.0 - Arbitrary Content Deletion Vulnerability

Arbitrary Content Deletion Vulnerability discovered by theviper17 in WordPress Plugin Neon Channel Product Customizer Free versions = 2.0...

7.5CVSS6.7AI score0.00382EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.4 views

WordPress plugin Neon Channel Product Customizer Free 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

7.5CVSS6.4AI score0.00382EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.3 views

PT-2025-33231 · Vertim · Vertim Neon Channel Product Customizer Free

Name of the Vulnerable Software and Affected Versions: vertim Neon Channel Product Customizer Free versions n/a through 2.0 Description: Missing authorization vulnerability exists due to incorrectly configured access control security levels in vertim Neon Channel Product Customizer Free...

7.5CVSS6.1AI score0.00382EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-26789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/neonbs - fix out-of- bounds access on short input The bit-sliced implementatio...

7.1CVSS5.8AI score0.00226EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/08 4:20 a.m.9 views

Malicious code in @instant-postgres/neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5998172caafd763bd9d8fc92acc7e18e96f4a14c19f5871e16257eaff6547366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.7 views

DEBIAN-CVE-2022-50231

In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG: KASAN: slab-out-of-bounds in neonpoly1305blocks.constprop.0+0x1b4/0x250 poly1305neon Read of size 4 at addr ffff0010e293f010 by task...

7.1CVSS5.5AI score0.00198EPSS
Exploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.6 views

UBUNTU-CVE-2022-50231

In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG: KASAN: slab-out-of-bounds in neonpoly1305blocks.constprop.0+0x1b4/0x250 poly1305neon Read of size 4 at addr ffff0010e293f010 by task...

7.1CVSS6.1AI score0.00198EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/06/18 12:0 a.m.14 views

PT-2025-26157 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.0.aarch64 Description: A read out-of-bounds error was reported in the Linux kernel, specifically in the neon poly1305 blocks function. This issue can be reproduced with a specially crafted code compiled as ...

7.8CVSS6.2AI score0.10458EPSS
Exploits16References585
RedhatCVE
RedhatCVE
added 2025/05/23 2:38 a.m.14 views

CVE-2023-5817

The Neon text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's neontextbox shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes color. This makes it possible for authenticated...

6.4CVSS6.1AI score0.00524EPSS
Exploits4References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:18 p.m.10 views

CVE-2020-13890

The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard...

5.4CVSS5.9AI score0.00545EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/14 12:42 a.m.22 views

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

5.4CVSS7.3AI score0.00179EPSS
Exploits0References3
NVD
NVD
added 2025/05/12 6:15 p.m.20 views

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

5.4CVSS0.00179EPSS
Exploits0References1
OSV
OSV
added 2025/05/12 6:15 p.m.6 views

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

5.4CVSS5.9AI score0.00179EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/12 12:0 a.m.5 views

Flytxt NEON-dX 安全漏洞

Flytxt NEON-dX is an enterprise software product from Flytxt for automating intelligent digital customer interactions. A security vulnerability exists in Flytxt NEON-dX that stems from an unvalidated userId parameter in the change password function, which could lead to a brute force attack...

5.4CVSS6.8AI score0.00179EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/12 12:0 a.m.8 views

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

5.8AI score0.00179EPSS
Exploits0References1
Rows per page
Query Builder