Lucene search
+L

89 matches found

Cvelist
Cvelist
•added 2023/10/09 6:38 p.m.•41 views

CVE-2023-41672 WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...

4.3CVSS9AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/09 6:38 p.m.•93 views

CVE-2023-41672

CVE-2023-41672 relates to a CSRF vulnerability in the WordPress plugin Hide admin notices – Admin Notification Center (

8.8CVSS6.4AI score0.00253EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/10/09 12:00 a.m.•17 views

WordPress Plugin Hide admin notices - Admin Notification Center Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Hide admin notices - Admin Notification...

8.8CVSS6.5AI score0.00253EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/09 12:00 a.m.•3 views

CVE-2023-41672: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...

8.8CVSS7.8AI score0.00253EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/09/04 12:00 a.m.•18 views

WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hide admin notices – Admin Notification Center Type Plugin Vulnerable versions = 2.3.2 Fixed in 2.3.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41672 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

8.8CVSS6.6AI score0.00253EPSS
SaveExploits0References2Affected Software1
Hacker One
Hacker One
•added 2020/09/09 12:42 a.m.•34 views

Mail.ru: read new emails from any inbox IOS APP in notification center

IDOR vulnerability in notification center API as used by Mail.ru Mail application for iOS allowed to request notifications for arbitrary e-mail address...

2.8AI score
SaveExploits0
CNVD
CNVD
•added 2018/05/11 12:00 a.m.•17 views

Synology Calendar Cross-Site Scripting Vulnerability

Synology Calendar is a file protection program from Synology that runs on Synology NAS devices.Notification Center is one of the system notification components. A cross-site scripting vulnerability exists in Notification Center in Synology Calendar versions prior to 2.1.1-0502. A remote attacker...

6.5CVSS5.9AI score0.00803EPSS
SaveExploits0References1
Prion
Prion
•added 2018/05/10 1:29 p.m.•27 views

Cross site scripting

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

3.5CVSS5.1AI score0.00803EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/05/10 1:29 p.m.•27 views

CVE-2018-8915

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

6.5CVSS5.9AI score0.00803EPSS
SaveExploits0References1
OSV
OSV
•added 2018/05/10 1:29 p.m.•13 views

CVE-2018-8915

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

5.4CVSS5.9AI score0.00803EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2018/05/10 1:29 p.m.•8 views

CVE-2018-8915

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

6.5CVSS5.7AI score0.00803EPSS
SaveExploits0References2
CVE
CVE
•added 2018/05/10 1:00 p.m.•64 views

CVE-2018-8915

The CVE concerns Synology Calendar’s Notification Center where an XSS vulnerability exists in the title parameter for versions before 2.1.1-0502. Remote authenticated users can inject arbitrary web script or HTML by supplying a crafted title, potentially impacting user sessions or data displayed ...

6.5CVSS5.1AI score0.00803EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/05/10 1:00 p.m.•35 views

CVE-2018-8915

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

6.5CVSS5.9AI score0.00803EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/10 12:00 a.m.•4 views

CVE-2018-8915: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...

6.5CVSS6.5AI score0.00803EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2018/05/09 4:07 p.m.•81 views

Self-destructing messages received on 'Signal for Mac' can be recovered later

It turns out that macOS client for the popular end-to-end encrypted messaging app Signal fails to properly delete disappearing self-destructing messages from the recipient's system, leaving the content of your sensitive messages at risk of getting exposed. For those unaware, the disappearing...

0.3AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2018/05/09 4:07 p.m.•22 views

Self-destructing messages received on 'Signal for Mac' can be recovered later

It turns out that macOS client for the popular end-to-end encrypted messaging app Signal fails to properly delete disappearing self-destructing messages from the recipient's system, leaving the content of your sensitive messages at risk of getting exposed. For those unaware, the disappearing...

6.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2016/05/26 12:00 a.m.•60 views

Apple iOS < 9.1 Multiple Vulnerabilities

Binary data 9328.prm...

10CVSS8AI score0.067EPSS
SaveExploits4References51
BDU FSTEC
BDU FSTEC
•added 2015/11/06 12:00 a.m.•11 views

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Notification Center component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to gain access to protected information by viewing notifications of calls and messages displayed on...

2.1CVSS5.5AI score0.00371EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2015/10/23 10:59 a.m.•24 views

CVE-2015-7000

Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a 1 Phone or 2 Messages notification on the lock screen soon after a setting was disabled...

2.1CVSS5.2AI score0.00371EPSS
SaveExploits0References4
Prion
Prion
•added 2015/10/23 10:59 a.m.•27 views

Design/Logic Flaw

Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a 1 Phone or 2 Messages notification on the lock screen soon after a setting was disabled...

2.1CVSS5.5AI score0.00371EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder