Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

4937 matches found

Prion
Prion•added 2024/02/06 1:15 a.m.•23 views

Input validation

Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lead to CSV injection...

4CVSS7.2AI score0.0034EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2024/02/06 12:0 a.m.•21 views

CVE-2023-47022

Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lead to CSV injection...

7.2AI score0.0034EPSS
SaveExploits0References1
Prion
Prion•added 2024/02/05 10:16 p.m.•23 views

Input validation

The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.7 via the action function due to missing validation on a user controlled key. This makes it possible for subscribers to view plugin preferences...

4CVSS6.9AI score0.00576EPSS
SaveExploits0References3Affected Software1
OSV
OSV•added 2024/02/05 10:16 p.m.•8 views

CVE-2024-0366

The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.7 via the action function due to missing validation on a user controlled key. This makes it possible for subscribers to view plugin preferences...

4.3CVSS5.8AI score0.00576EPSS
SaveExploits0References3
NVD
NVD•added 2024/02/05 10:16 p.m.•26 views

CVE-2024-0366

The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.7 via the action function due to missing validation on a user controlled key. This makes it possible for subscribers to view plugin preferences...

4.3CVSS4.4AI score0.00576EPSS
SaveExploits0References3
OSV
OSV•added 2024/02/05 10:15 p.m.•11 views

CVE-2023-6983

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.1 via the vgdisplaydata shortcode due to missing validation on a user controlled key. This makes it possible fo...

4.3CVSS7.3AI score0.00472EPSS
SaveExploits0References2
NVD
NVD•added 2024/02/05 10:15 p.m.•27 views

CVE-2023-6983

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.1 via the vgdisplaydata shortcode due to missing validation on a user controlled key. This makes it possible fo...

4.3CVSS4.3AI score0.00472EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2024/02/05 10:15 p.m.•6 views

CVE-2023-6983

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.1 via the vgdisplaydata shortcode due to missing validation on a user controlled key. This makes it possible fo...

4.3CVSS5.4AI score0.00472EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2024/02/05 9:22 p.m.•32 views

CVE-2024-0366 Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference

The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.7 via the action function due to missing validation on a user controlled key. This makes it possible for subscribers to view plugin preferences...

4.3CVSS4.7AI score0.00576EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2024/02/05 9:22 p.m.•16 views

CVE-2024-0366

The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.7 via the action function due to missing validation on a user controlled key. This makes it possible for subscribers to view plugin preferences...

4.3CVSS6.6AI score0.00576EPSS
SaveExploits0References3
CVE
CVE•added 2024/02/05 9:22 p.m.•61 views

CVE-2024-0366

CVE-2024-0366 affects WordPress plugin Starbox – the Author Box for Humans. It is an Insecure Direct Object Reference (IDOR) via an action function caused by missing validation on a user-controlled key, affecting all versions up to 3.4.7. Impact: subscribers could view plugin preferences and pote...

4.3CVSS5.3AI score0.00576EPSS
SaveExploits0References3Affected Software1
CVE
CVE•added 2024/02/05 9:21 p.m.•77 views

CVE-2023-6983

CVE-2023-6983 affects the WordPress plugin “Display custom fields in the frontend – Post and User Profile Fields”. It is an insecure direct object reference (IDOR) in the vg_display_data shortcode caused by missing validation on a user-controlled key, enabling authenticated attackers with contrib...

4.3CVSS4.6AI score0.00472EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2024/02/05 9:21 p.m.•17 views

CVE-2023-6983 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.1 via the vgdisplaydata shortcode due to missing validation on a user controlled key. This makes it possible fo...

4.3CVSS6.6AI score0.00472EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2024/02/05 9:21 p.m.•41 views

CVE-2023-6983 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure

The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.1 via the vgdisplaydata shortcode due to missing validation on a user controlled key. This makes it possible fo...

4.3CVSS4.7AI score0.00472EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2024/02/05 12:0 a.m.•10 views

PT-2024-15501 · WordPress · The Starbox – The Author Box For Humans

Name of the Vulnerable Software and Affected Versions: The Starbox – the Author Box for Humans plugin for WordPress versions up to, and including, 3.4.7 Description: The issue is related to Insecure Direct Object Reference, which allows subscribers to view plugin preferences and potentially other...

4.3CVSS5.4AI score0.00576EPSS
SaveExploits0References7
CNNVD
CNNVD•added 2024/02/05 12:0 a.m.•10 views

WordPress plugin Starbox security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

4.3CVSS7AI score0.00576EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB•added 2024/01/31 12:0 a.m.•20 views

Starbox < 3.4.8 - Subscriber+ Plugin Preferences / User Settings Access via IDOR

Description The plugin is vulnerable to Insecure Direct Object Reference via the action function due to missing validation on a user controlled key. This makes it possible for subscribers to view plugin preferences and potentially other user settings...

4CVSS6.7AI score0.00576EPSS
SaveExploits0References1Affected Software1
NVD
NVD•added 2024/01/29 2:15 p.m.•28 views

CVE-2024-23747

The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference IDOR vulnerability. This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URI. By manipulating this id parameter...

7.5CVSS7.5AI score0.00694EPSS
SaveExploits1References2
Prion
Prion•added 2024/01/29 2:15 p.m.•21 views

Security feature bypass

The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference IDOR vulnerability. This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URI. By manipulating this id parameter...

5CVSS7.1AI score0.00694EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment•added 2024/01/29 12:0 a.m.•6 views

CVE-2024-23747

The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference IDOR vulnerability. This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URI. By manipulating this id parameter...

7.1AI score0.00694EPSS
SaveExploits1References2
Rows per page
Query Builder