Lucene search
+L

731 matches found

RedhatCVE
RedhatCVE
•added 2025/03/14 3:44 p.m.•13 views

CVE-2025-28863

Cross-Site Request Forgery CSRF vulnerability in Carlos Minatti Delete Original Image delete-original-image allows Cross Site Request Forgery.This issue affects Delete Original Image: from n/a through = 0.4...

8.8CVSS7.2AI score0.00195EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/11 9:40 p.m.•14 views

WordPress Delete Original Image plugin <= 0.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Delete Original Image versions = 0.4...

8.8CVSS9.1AI score0.00195EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/03/11 9:15 p.m.•27 views

CVE-2025-28863

Cross-Site Request Forgery CSRF vulnerability in Carlos Minatti Delete Original Image allows Cross Site Request Forgery. This issue affects Delete Original Image: from n/a through 0.4...

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/11 9:15 p.m.•15 views

CVE-2025-28863

Cross-Site Request Forgery CSRF vulnerability in Carlos Minatti Delete Original Image delete-original-image allows Cross Site Request Forgery.This issue affects Delete Original Image: from n/a through = 0.4...

8.8CVSS0.00195EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/11 9:00 p.m.•27 views

CVE-2025-28863 WordPress Delete Original Image plugin <= 0.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Carlos Minatti Delete Original Image delete-original-image allows Cross Site Request Forgery.This issue affects Delete Original Image: from n/a through = 0.4...

4.3CVSS0.00195EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 9:00 p.m.•71 views

CVE-2025-28863

CVE-2025-28863 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin Delete Original Image (versions

8.8CVSS7.2AI score0.00195EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/11 9:00 p.m.•7 views

CVE-2025-28863 WordPress Delete Original Image plugin <= 0.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Carlos Minatti Delete Original Image delete-original-image allows Cross Site Request Forgery.This issue affects Delete Original Image: from n/a through = 0.4...

4.3CVSS8.5AI score0.00195EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•12 views

WordPress plugin Delete Original Image 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.9AI score0.00195EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•3 views

PT-2025-10914

Name of the Vulnerable Software and Affected Versions: Carlos Minatti Delete Original Image versions 0.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross-Site Request Forgery. This is a type of attack where an attacker can trick a...

8.8CVSS0.00195EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•4 views

CVE-2025-28863: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Carlos Minatti Delete Original Image delete-original-image allows Cross Site Request Forgery.This issue affects Delete Original Image: from n/a through = 0.4...

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2024-38558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVSPACKETCMDEXECUTE has 3 mai...

10CVSS6.1AI score0.00822EPSS
SaveExploits1References3
Kaspersky
Kaspersky
•added 2025/03/04 12:00 a.m.•92 views

KLA81178 SB vulnerability in LibreOffice

Validation of untrusted input vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-1080: Macro URL arbitrary script execution Exploitation Public exploits exist for this vulnerability. Related products...

7.8CVSS8.3AI score0.00305EPSS
SaveExploits0References3
OSV
OSV
•added 2025/02/26 7:00 a.m.•14 views

UBUNTU-CVE-2022-49068

In the Linux kernel, the following vulnerability has been resolved: btrfs: release correct delalloc amount in direct IO write path Running generic/406 causes the following WARNING in btrfsdestroyinode which tells there are outstanding extents left. In btrfsgetblocksdirectwrite, we reserve a...

5.5CVSS5.7AI score0.00258EPSS
SaveExploits0References6
OSV
OSV
•added 2024/12/29 9:15 a.m.•25 views

AZL-55297 CVE-2024-56719 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO DMA API usage causing oops Commit 66600fac7a98 "net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data" moved the assignment of txskbuffdma's members to be later in stmmactsoxmit. The buf dma...

5.5CVSS5.8AI score0.00497EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/18 6:15 a.m.•64 views

CVE-2024-11308

The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore the original content...

6.2CVSS0.00154EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/18 5:59 a.m.•45 views

CVE-2024-11308 TRCore DVC - Use of Hard-coded Cryptographic Key

The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore the original content...

6.2CVSS0.00154EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/18 5:59 a.m.•72 views

CVE-2024-11308

The CVE-2024-11308 entry concerns TRCore’s DVC, a file-insurance system, which encrypts files with a hardcoded key. The underlying issue is the use of a static cryptographic key, enabling an attacker with local access to decrypt targeted files and recover original content as described in multiple...

6.2CVSS5.9AI score0.00154EPSS
SaveExploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
•added 2024/11/12 8:00 a.m.•14 views

ext4: update orig_path in ext4_find_extent()

...

5.5CVSS6.8AI score0.0025EPSS
SaveExploits0
CVE
CVE
•added 2024/11/12 2:07 a.m.•96 views

CVE-2024-49394

CVE-2024-49394 affects mutt and neomutt: the In-Reply-To header is not cryptographically signed, enabling an attacker to impersonate the sender by reusing an unencrypted but signed email. Public references in the connected documents show multiple advisories addressing this issue and releasing fix...

5.3CVSS5.1AI score0.00325EPSS
SaveExploits0References5Affected Software2
Vulnrichment
Vulnrichment
•added 2024/11/09 10:14 a.m.•6 views

CVE-2024-50225 btrfs: fix error propagation of split bios

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix error propagation of split bios The purpose of btrfsbbiopropagateerror shall be propagating an error of split bio to its original btrfsbio, and tell the error to the upper layer. However, it's not working well on some...

7.5AI score0.00214EPSS
SaveExploits0References2
Rows per page
Query Builder