Lucene search
+L

499 matches found

Cvelist
Cvelist
added 2025/05/12 12:0 a.m.31 views

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

0.00179EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/12 12:0 a.m.8 views

PT-2025-20728 · Flytxt · Flytxt Neon-Dx

Name of the Vulnerable Software and Affected Versions: Flytxt NEON-dX version 0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c Description: The issue concerns the userId parameter in the change password function, allowing attackers to execute brute force attacks to discover user passwords. This could potential...

5.4CVSS6.5AI score0.00179EPSS
Exploits0References5
CVE
CVE
added 2025/05/12 12:0 a.m.60 views

CVE-2023-34732

CVE-2023-34732 affects Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c. The issue is in the userId parameter of the change password function, enabling brute-force attempts to reveal user passwords. Root cause: unvalidated userId input in the change-password path. Impact: potential password dis...

5.4CVSS7AI score0.00179EPSS
Exploits0References1Affected Software1
Fedora
Fedora
added 2025/04/20 4:23 a.m.18 views

[SECURITY] Fedora 42 Update: llama-cpp-b4094-11.fc42

The main goal of llama.cpp is to run the LLaMA model using 4-bit integer quantization on a MacBook Plain C/C++ implementation without dependencies Apple silicon first-class citizen - optimized via ARM NEON, Accelerate and Metal frameworks AVX, AVX2 and AVX512 support for x86 architectures Mixed F...

6.9AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/04/13 9:15 a.m.16 views

CVE-2025-32565

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

9.3CVSS7.3AI score0.00505EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/11 8:42 a.m.6 views

CVE-2025-32565 WordPress Neon Product Designer Plugin <= 2.1.1 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer allows SQL Injection. This issue affects Neon Product Designer: from n/a through 2.1.1...

9.3CVSS9.6AI score0.00505EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/11 8:42 a.m.25 views

CVE-2025-32565 WordPress Neon Product Designer Plugin <= 2.2.0 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

9.3CVSS0.00505EPSS
Exploits0References1
CVE
CVE
added 2025/04/11 8:42 a.m.55 views

CVE-2025-32565

CVE-2025-32565: Unauthenticated SQL Injection in Neon Product Designer (WordPress plugin) allows attackers to manipulate SQL queries. Affects Neon Product Designer: from n/a through 2.1.1. CVSS 3.1 base 9.3 (CRITICAL); attack vector NETWORK, privilege requirements NONE, user interaction NONE, sco...

9.3CVSS7.3AI score0.00505EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/11 12:0 a.m.4 views

WordPress plugin Neon Product Designer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS9.1AI score0.00505EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/04/11 12:0 a.m.5 views

PT-2025-16069 · Vertim · Vertim Neon Product Designer

Name of the Vulnerable Software and Affected Versions: vertim Neon Product Designer versions n/a through 2.1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.3CVSS9.4AI score0.00505EPSS
Exploits0References4
Openbugbounty
Openbugbounty
added 2025/03/25 12:38 p.m.5 views

jst-southafrica.com Cross Site Scripting vulnerability OBB-4040076

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2025/03/07 3:33 p.m.5 views

live.tdpu.uz Cross Site Scripting vulnerability OBB-4033959

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2025/03/06 10:43 a.m.6 views

crocurry.com Cross Site Scripting vulnerability OBB-4033227

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2009-2473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial o...

4.3CVSS7AI score0.08437EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/06 2:23 a.m.8 views

CVE-2025-22799

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

8.5CVSS7.3AI score0.00392EPSS
Exploits0References1
NVD
NVD
added 2025/01/15 4:15 p.m.22 views

CVE-2025-22799

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

8.5CVSS0.00392EPSS
Exploits0References1
CVE
CVE
added 2025/01/15 3:23 p.m.51 views

CVE-2025-22799

CVE-2025-22799: Neon Product Designer suffers an SQL Injection due to improper neutralization of input elements in SQL commands. Affected: Neon Product Designer versions up to and including 2.1.1 (vendor listed as n/a). CVSS 3.1 base score 8.5 (HIGH) with NETWORK attack vector, LOW complexity, LO...

8.5CVSS7.3AI score0.00392EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/15 3:23 p.m.25 views

CVE-2025-22799 WordPress Neon Product Designer Plugin <= 2.2.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in vertim Neon Product Designer neon-product-designer-for-woocommerce allows SQL Injection.This issue affects Neon Product Designer: from n/a through = 2.2.0...

8.5CVSS0.00392EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/15 3:23 p.m.7 views

CVE-2025-22799 WordPress Neon Product Designer Plugin <= 2.1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Vertim Coders Neon Product Designer allows SQL Injection.This issue affects Neon Product Designer: from n/a through 2.1.1...

8.5CVSS9AI score0.00392EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/15 12:0 a.m.5 views

WordPress plugin Neon Product Designer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS8.8AI score0.00392EPSS
Exploits0References2
Rows per page
Query Builder