Lucene search
+L

3345 matches found

Circl
Circl
•added 2024/09/11 12:49 p.m.•10 views

CVE-2024-8096

creationtimestamp| type| source ---|---|--- 2024-09-11 12:49:50+00:00| seen| https://t.me/cvedetector/5342 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06...

6.5CVSS7.6AI score0.00729EPSS
SaveExploits1References2
NVD
NVD
•added 2024/09/11 9:15 a.m.•33 views

CVE-2024-8277

The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2. This is due to the plugin not properly validating what user transient is being used in the login function and not properly verifying the user's identit...

9.8CVSS0.01633EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/09/11 12:00 a.m.•49 views

PT-2024-38907 · WordPress · Woocommerce Photo Reviews Premium

Name of the Vulnerable Software and Affected Versions: WooCommerce Photo Reviews Premium plugin for WordPress versions up to, and including, 1.3.13.2 Description: The issue is due to the plugin not properly validating what user transient is being used in the login function and not properly...

9.8CVSS6.8AI score0.01633EPSS
SaveExploits1References12
Circl
Circl
•added 2024/09/06 11:35 a.m.•14 views

CVE-2023-52916

creationtimestamp| type| source ---|---|--- 2024-09-06 11:35:24+00:00| published-proof-of-concept| https://t.me/cvedetector/4958 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

7.8CVSS7AI score0.00218EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/09/05 6:30 p.m.•6 views

CVE-2024-8491

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.2AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/08/22 3:12 a.m.•13 views

SUSE CVE-2024-7974

Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...

8.8CVSS7.1AI score0.00485EPSS
SaveExploits0References5
Ubuntu
Ubuntu
•added 2024/08/20 8:15 a.m.•57 views

LSN-0106-1: Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow timeout for anonymous sets Never used from userspace, disallow these parameters.CVE-2023-52620 In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work...

9.8CVSS6.3AI score0.00591EPSS
SaveExploits0
attackerkb
attackerkb
•added 2024/08/16 3:15 a.m.•18 views

CVE-2022-3399

The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cookienoticeoptionsrefusecodehead' parameter in versions up to, and including, 2.4.17.1 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS5.9AI score0.00368EPSS
SaveExploits0References3
NVD
NVD
•added 2024/08/16 3:15 a.m.•23 views

CVE-2022-3399

The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cookienoticeoptionsrefusecodehead' parameter in versions up to, and including, 2.4.17.1 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS0.00368EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/08/16 1:32 a.m.•18 views

WordPress Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.4.17.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by c3p0d4y in WordPress Plugin Cookie Notice & Compliance for GDPR / CCPA versions = 2.4.17.1...

4.4CVSS5.7AI score0.00368EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/08/16 12:00 a.m.•34 views

WordPress Cookie Notice & Compliance for GDPR / CCPA Plugin <= 2.4.17.1 is vulnerable to Cross Site Scripting (XSS)

Software Cookie Notice & Compliance for GDPR / CCPA Type Plugin Vulnerable versions = 2.4.17.1 Fixed in 2.4.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-3399 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1b0453de5cdc...

4.4CVSS5.8AI score0.00368EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/16 12:00 a.m.•4 views

CVE-2022-3399: Improper Neutralization of Input During Web Page Generation

The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cookienoticeoptionsrefusecodehead' parameter in versions up to, and including, 2.4.17.1 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS5.9AI score0.00368EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/16 12:00 a.m.•16 views

IBM Cloud Pak for Security和IBM QRadar Suite 安全漏洞

IBM Cloud Pak for Security and IBM QRadar Suite are both products of International Business Machines IBM, U.S.A. IBM Cloud Pak for Security is a software application. An open security platform that connects to your existing data sources to generate deeper insights and enables you to take automate...

7.5CVSS6.5AI score0.00458EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/08/15 12:00 a.m.•6 views

PT-2024-11586

Name of the Vulnerable Software and Affected Versions Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress versions up to, and including, 2.4.17.1 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...

4.4CVSS0.00368EPSS
SaveExploits0References7
Intel
Intel
•added 2024/08/13 12:00 a.m.•28 views

Intel® FPGA SDK for OpenCL™ Software Technology Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01104.html...

6AI score
SaveExploits0
Circl
Circl
•added 2024/08/01 10:24 a.m.•17 views

CVE-2024-5331

creationtimestamp| type| source ---|---|--- 2024-08-01 10:24:26+00:00| seen| https://t.me/cvedetector/2221...

4.3CVSS4.8AI score0.00235EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/07/30 1:34 a.m.•30 views

Security Bulletin: Due to use of Apache Pulsar, IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is vulnerable to a security restrictions bypass.

Summary Pulsar is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2024-28098, CVE-2024-29834 The below vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-28098 DESCRIPTION: Apache Pulsar could allow a remote authenticated attacker to bypa...

6.4CVSS6.5AI score0.01701EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/07/16 5:58 a.m.•3 views

BELL-CVE-2024-40932

Bulletin has no description...

5.5CVSS7.1AI score0.00261EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/07/12 12:56 p.m.•19 views

WordPress Matomo Analytics plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) leading to Notice Dismissal vulnerability

Cross Site Request Forgery CSRF leading to Notice Dismissal vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Matomo Analytics versions = 5.1.1...

4.3CVSS6.9AI score0.002EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/07/05 11:00 a.m.•17 views

WordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerability

Broken Access Control on Notice Dismissal vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Business One Page versions = 1.2.9...

5.4CVSS6.8AI score0.00326EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder