Lucene search
+L

4845 matches found

Cvelist
Cvelist
•added 2024/12/16 2:13 p.m.•37 views

CVE-2024-54366 WordPress Vimeography plugin <= 2.4.4 - Full Path Disclosure (FPD) vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in videogallery Vimeography vimeography allows Retrieve Embedded Sensitive Data.This issue affects Vimeography: from n/a through = 2.4.4...

5.3CVSS0.0058EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/16 2:13 p.m.•56 views

CVE-2024-54366

CVE-2024-54366 affects the Vimeography (Vimeo Video Gallery) WordPress plugin. The issue is a vulnerability in error message handling that can expose embedded sensitive data, leading to leakage of sensitive information. Affected version: Vimeography

5.3CVSS7.2AI score0.0058EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:13 p.m.•28 views

CVE-2024-54366 WordPress Vimeography plugin <= 2.4.4 - Full Path Disclosure (FPD) vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in Dave Kiss Vimeography allows Retrieve Embedded Sensitive Data.This issue affects Vimeography: from n/a through 2.4.4...

5.3CVSS6.9AI score0.0058EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/11 10:40 p.m.•16 views

WordPress Vimeography plugin <= 2.4.4 - Full Path Disclosure (FPD) vulnerability

Full Path Disclosure FPD vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin Vimeography versions = 2.4.4...

5.3CVSS7AI score0.0058EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/11/23 6:15 a.m.•31 views

CVE-2024-11265

The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.3. This is due to returning image upload error messages with full path information. This makes it possible for authenticated...

4.3CVSS0.00614EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/11/23 5:40 a.m.•46 views

CVE-2024-11265 Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure

The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.3. This is due to returning image upload error messages with full path information. This makes it possible for authenticated...

4.3CVSS0.00614EPSS
SaveExploits0References4
CVE
CVE
•added 2024/11/23 5:40 a.m.•75 views

CVE-2024-11265

CVE-2024-11265 affects the WordPress plugin WP Maximum Upload File Size | Increase Execution Time. All versions

4.3CVSS4.4AI score0.00614EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/11/23 5:40 a.m.•17 views

CVE-2024-11265 Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure

The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.3. This is due to returning image upload error messages with full path information. This makes it possible for authenticated...

4.3CVSS6.5AI score0.00614EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/23 12:00 a.m.•7 views

CVE-2024-11265: Exposure of Sensitive Information to an Unauthorized Actor

The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.1.3. This is due to returning image upload error messages with full path information. This makes it possible for authenticated...

4.3CVSS5.7AI score0.00614EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/22 9:41 p.m.•18 views

WordPress Wp Maximum Upload File Size plugin <= 1.1.3 - Authenticated (Author+) Full Path Disclosure vulnerability

Authenticated Author+ Full Path Disclosure vulnerability discovered by Kasug4 in WordPress Plugin Download Increase Maximum Upload File Size | Increase Execution Time versions = 1.1.3...

4.3CVSS7.1AI score0.00614EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2024/11/13 11:15 p.m.•21 views

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/13 11:15 p.m.•30 views

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

7.5CVSS0.00385EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•6 views

CVE-2024-40407: Undefined Security Weakness

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/13 12:00 a.m.•22 views

PT-2024-28832 · Cybele · Thinfinity Workspace

Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: A full path disclosure issue allows attackers to obtain the root path of the application via unspecified vectors. This could potentially be exploited to gain...

7.5CVSS6.9AI score0.00385EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•20 views

Cybele Software Thinfinity Workspace security vulnerabilities

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113, which stems from a full...

7.5CVSS6.5AI score0.00385EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/13 12:00 a.m.•93 views

CVE-2024-40407

A full path disclosure vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 . Attackers can use unspecified vectors to obtain the root path of the application, which could be used to gain sensitive information about the application's structure. To remediate th...

7.5CVSS6.8AI score0.00385EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/13 12:00 a.m.•35 views

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

7AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/13 12:00 a.m.•33 views

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/30 7:42 a.m.•44 views

CVE-2024-50512 WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through = 3.10.2...

5.3CVSS0.00343EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/30 7:42 a.m.•20 views

CVE-2024-50512 WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability

Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through = 3.10.2...

5.3CVSS7.2AI score0.00343EPSS
SaveExploits0References1
Rows per page
Query Builder