Lucene search
+L

1085 matches found

Patchstack
Patchstack
added 2024/04/15 12:27 p.m.5 views

WordPress WP Poll Maker plugin <= 3.4 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin WP Poll Maker versions = 3.4...

9.9CVSS7AI score0.0065EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.8 views

Silex Technology DS-600 安全漏洞

The Silex Technology DS-600 is a hardware device from Silex Technology, Inc. designed to easily connect and share USB 3.0 and 2.0 devices over a network. A security vulnerability exists in the Silex Technology DS-600 version v.1.4.1. A remote attacker could exploit the vulnerability to edit devic...

9.1CVSS6.8AI score0.00568EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/12 4:15 p.m.8 views

CVE-2024-30384

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on EX4300 Series allows a locally authenticated attacker with low privileges to cause a Denial-of-Service Dos. If a specific CLI command is issued, a PFE crash wi...

6.8CVSS5.8AI score0.00168EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.7 views

PT-2024-3168 · Juniper Networks · Containerized Routing Protocol Daemon +1

Name of the Vulnerable Software and Affected Versions: Juniper Cloud Native Router JCNR versions prior to 23.4 Containerized Routing Protocol Daemon cRPD versions prior to 23.4R1 Description: The issue is related to the use of hard-coded cryptographic keys in Juniper Cloud Native Router JCNR and...

9.2CVSS7.2AI score0.00676EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/04/08 5:10 a.m.7 views

WordPress FooGallery plugin <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields vulnerability

Authenticated Author+ Stored Cross-Site Scripting via Image Attachment Fields vulnerability discovered by Tim Coen in WordPress Plugin FooGallery versions = 2.4.14...

6.4CVSS5.8AI score0.00344EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2024/04/06 1:59 a.m.3 views

SUSE CVE-2024-3116

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

9.9CVSS8.2AI score0.64846EPSS
SaveExploits5References3
CNNVD
CNNVD
added 2024/04/02 12:0 a.m.8 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which arises from the use of implicit intent for sensitive communications. The following...

6.2CVSS6.5AI score0.00147EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.10 views

PT-2024-23439 · Unknown · Fg Prestashop To Woocommerce

Name of the Vulnerable Software and Affected Versions: FG PrestaShop to WooCommerce versions n/a through 4.45.1 Description: The issue is related to the insertion of sensitive information into log files. This can potentially expose confidential data. There is no information provided about the...

5.3CVSS9.3AI score0.0047EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/24 12:0 a.m.6 views

Varnish Cache 安全漏洞

Varnish Cache is a suite of reverse web caching servers. A security vulnerability exists in Varnish Cache versions prior to 7.3.2 and 7.4.x prior to 7.4.3 and Varnish Enterprise versions prior to 6.0.12r6, which stems from a credit exhaustion that allows HTTP/2 connections to control the flow...

7.5CVSS7.3AI score0.03663EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/03/12 12:0 a.m.7 views

PT-2024-13442 · WordPress · Ladiapp

Name of the Vulnerable Software and Affected Versions: LadiApp plugin for WordPress versions up to, and including, 4.4 Description: The issue is related to a missing nonce check on the init endpoint function, which is hooked via 'init'. This allows unauthenticated attackers to modify various...

4.3CVSS9.3AI score0.00275EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/03/12 12:0 a.m.22 views

PT-2024-13346 · WordPress · Ladiapp

Name of the Vulnerable Software and Affected Versions: LadiApp plugin for WordPress versions up to, and including, 4.4 Description: The issue is related to a missing nonce check on the ladiflow save hook function, making it possible for unauthenticated attackers to update the ladiflow hook config...

4.3CVSS9.4AI score0.0021EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.2 views

PT-2024-19714 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access sensitive user...

5.5CVSS7.5AI score0.0022EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.4 views

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from an application that may be able to access sensitive user data...

6.2CVSS6.4AI score0.00261EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.4 views

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from an application that may be able to access sensitive user data...

8.1CVSS6.4AI score0.00505EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.8 views

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which originates from an application that may be able to capture a user's screen...

3.3CVSS6.5AI score0.0022EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.9 views

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from the U.S.-based Apple Inc. A security vulnerability exists in Apple macOS Sonoma version 14.4, which originates from a malicious application that may be able to observe user data in log entries related to accessibility notifications...

7.5CVSS6.4AI score0.00635EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.3 views

PT-2024-19787 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 17.4 Apple iOS versions prior to 17.4 Apple iPadOS versions prior to 17.4 Apple macOS Sonoma versions prior to 14.4 Apple watchOS versions prior to 10.4 Description: This issue was addressed through improved state...

4.6CVSS7.4AI score0.00413EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.4 views

PT-2024-19728 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 Description: The issue allows entitlements and privacy permissions granted to an app to be used by a malicious app. This was addressed with improved checks. Recommendations: For macOS Sonoma versions prior ...

7.8CVSS7.8AI score0.0022EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.13 views

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from an application that may be able to elevate privileges...

8.4CVSS6.5AI score0.00423EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.9 views

WordPress Plugin The Plus Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS6AI score0.00343EPSS
SaveExploits0References3
Rows per page
Query Builder