Lucene search
+L

566 matches found

Patchstack
Patchstack
added 2023/06/15 12:0 a.m.14 views

WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Scripting (XSS)

Software NextGen GalleryView Type Plugin Vulnerable versions = 0.5.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35098 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8e241746a1e2 Credits LEE SE HYOUNG...

7.1CVSS5.6AI score0.00387EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/06/02 4:15 a.m.5 views

CVE-2023-27744

An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution...

7.8CVSS7.4AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/02 4:15 a.m.4 views

CVE-2023-27744

An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution...

7.8CVSS7.3AI score0.00824EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/06/02 12:0 a.m.7 views

PT-2023-21314 · South River Technologies · Titanftp Nextgen Server

Name of the Vulnerable Software and Affected Versions: South River Technologies TitanFTP NextGen server affected versions not specified Description: An issue in the South River Technologies TitanFTP NextGen server allows for a vertical privilege escalation, leading to remote code execution...

7.8CVSS7.9AI score0.00824EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2023/06/02 12:0 a.m.30 views

CVE-2023-27744

An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution...

8.4AI score0.00824EPSS
SaveExploits1References2
CVE
CVE
added 2023/06/02 12:0 a.m.56 views

CVE-2023-27744

Technical details (affected software, root cause, specific versions, or fixes) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

7.8CVSS8.1AI score0.00824EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/06/02 12:0 a.m.8 views

South River Technologies TitanFTP NextGen 安全漏洞

South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen that stems from allowing vertical elevation of...

7.8CVSS7.8AI score0.00824EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/06/02 12:0 a.m.9 views

South River Technologies TitanFTP NextGen 安全漏洞

South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen versions prior to v2.0.1.2102, which originated fr...

8.8CVSS7.9AI score0.00456EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2023/05/30 12:0 a.m.14 views

WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software NextGen GalleryView Type Plugin Vulnerable versions = 0.5.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-34185 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cfce11c606a0 Credits LEE SE HYOUNG...

6.5CVSS6.6AI score0.0022EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/05/30 12:0 a.m.10 views

NextGen GalleryView <= 0.5.5 - Cross-Site Request Forgery

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

6.5CVSS6.7AI score0.0022EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2023/03/02 12:0 a.m.13 views

WordPress NextGEN Gallery Plugin < 3.29 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagely:nextgengallery"; if description...

4.3CVSS4.8AI score0.00229EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/01 2:15 p.m.5 views

CVE-2022-38468

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

4.3CVSS5.8AI score0.00229EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/01 2:15 p.m.33 views

CVE-2022-38468

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

4.3CVSS4.6AI score0.00229EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/01 2:15 p.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

4.3CVSS4.7AI score0.00229EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/01 1:2 p.m.11 views

CVE-2022-38468 WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

4.3CVSS4.7AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/01 1:2 p.m.31 views

CVE-2022-38468 WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

4.3CVSS5AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/01 1:2 p.m.75 views

CVE-2022-38468

CVE-2022-38468 : A CSRF vulnerability in the Imagely WordPress Gallery Plugin – NextGEN Gallery (versions

4.3CVSS5AI score0.00229EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/01 12:0 a.m.6 views

WordPress plugin NextGEN Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.2AI score0.00229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/01 12:0 a.m.8 views

PT-2023-13608 · Imagely · Imagely Wordpress Gallery Plugin - Nextgen Gallery

Name of the Vulnerable Software and Affected Versions: Imagely WordPress Gallery Plugin - NextGEN Gallery versions prior to 3.29 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to thumbnail alteration. Recommendations: For versions prior to 3.2...

4.3CVSS5.5AI score0.00229EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/02/14 12:0 a.m.17 views

WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)

Software NextGEN Gallery Type Plugin Vulnerable versions = 3.28 Fixed in 3.29 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-38468 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fe370d77a56e Credits István Márton Require...

4.3CVSS6.6AI score0.00229EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder