Lucene search
+L

2213 matches found

Cvelist
Cvelist
added 2024/10/21 6:0 a.m.21 views

CVE-2024-8625 TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection

The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

0.02323EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/21 6:0 a.m.11 views

CVE-2024-8625 TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection

The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.2AI score0.02323EPSS
SaveExploits1References1
CVE
CVE
added 2024/10/21 6:0 a.m.79 views

CVE-2024-8625

The TS Poll WordPress plugin is affected: versions prior to 2.4.0 do not sanitize/escape a parameter before using it in a SQL statement, enabling an SQL injection through admin-level access. Documented impact correlates to high severity (CVSS 3.1 base: 7.2). Affected component: the plugin’s SQL u...

7.2CVSS7.2AI score0.02323EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.7 views

WordPress plugin TS Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.2CVSS7.7AI score0.02323EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/10/20 12:0 a.m.10 views

PT-2024-39140

Name of the Vulnerable Software and Affected Versions: TS Poll WordPress plugin versions prior to 2.4.0 Description: The issue allows admins to perform SQL injection attacks due to the lack of sanitization and escaping of a parameter before using it in a SQL statement. Recommendations: For versio...

7.2CVSS5.6AI score0.02323EPSS
SaveExploits1References9
RedHat Linux
RedHat Linux
added 2024/10/16 1:8 a.m.8 views

kernel: ionic: fix use after netif_napi_del()

A vulnerability was found in the Linux kernel's Ionic driver in the ionicqcqenable function, where the issue arises when the driver fails to reset the .poll pointer to NULL after a queue is unregistered via netifnapidel, leading to a use-after-free scenario when attempting to enable a previously...

7.8CVSS7.2AI score0.00307EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2024/10/12 12:0 a.m.5 views

CVE-2024-46676

...

5.5CVSS6.5AI score0.00245EPSS
SaveExploits0
NVD
NVD
added 2024/10/10 3:15 a.m.13 views

CVE-2024-9022

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.4.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

7.2CVSS0.00976EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2024/10/10 2:6 a.m.12 views

CVE-2024-9022 TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.4.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

7.2CVSS5.9AI score0.00976EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2024/10/10 2:6 a.m.25 views

CVE-2024-9022 TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.4.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

7.2CVSS0.00976EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/10/10 12:0 a.m.9 views

WordPress plugin TS Poll SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.2CVSS7.2AI score0.00976EPSS
SaveExploits1References6
Patchstack
Patchstack
added 2024/10/09 3:30 p.m.8 views

WordPress TS Poll plugin <= 2.3.9 - Authenticated (Administrator+) SQL Injection via orderby Parameter vulnerability

Authenticated Administrator+ SQL Injection via orderby Parameter vulnerability discovered by WordFence in WordPress Plugin TS Poll versions = 2.4.0...

7.2CVSS8.1AI score0.00976EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/09 12:0 a.m.10 views

PT-2024-39367 · WordPress · Ts Poll – Survey

Name of the Vulnerable Software and Affected Versions: TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress versions up to, and including, 2.3.9 Description: The issue arises from insufficient escaping on the user-supplied orderby parameter and lack of sufficient preparation...

7.2CVSS7.5AI score0.00976EPSS
SaveExploits1References12
Patchstack
Patchstack
added 2024/10/09 12:0 a.m.22 views

WordPress Responsive Poll Plugin <= 2.3.9 is vulnerable to SQL Injection

Software Responsive Poll Type Plugin Vulnerable versions = 2.3.9 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-9022 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 2e687784b00a Credits WordFence Required privilege Administrator Published...

7.2CVSS7.2AI score0.02323EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.17 views

The vulnerability of the io_uring/poll component in the Linux operating system’s kernel allows for a malfunction to occur, leading to service failure.

The vulnerability of the iouring/poll component in the Linux operating system’s kernel is related to the state of the race condition during multi-address request operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00205EPSS
SaveExploits0References9Affected Software3
Talos Blog
Talos Blog
added 2024/09/19 6:0 p.m.36 views

Talk of election security is good, but we still need more money to solve the problem

Last week, six Secretaries of State testified to U.S. Congress about the current state of election security ahead of November's Presidential election. Some of the same topics came up as usual -- disinformation campaigns, influence from foreign actors, and the physical protection of poll workers o...

7.5CVSS8.9AI score0.04469EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/09/14 2:51 a.m.5 views

SUSE CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

4.3CVSS6.5AI score0.00245EPSS
SaveExploits0References17
RedhatCVE
RedhatCVE
added 2024/09/13 11:41 a.m.19 views

CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

5.5CVSS6.8AI score0.00245EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/13 6:15 a.m.15 views

AZL-49582 CVE-2024-46676 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

5.5CVSS6.3AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/13 6:15 a.m.2 views

DEBIAN-CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

5.5CVSS5.7AI score0.00245EPSS
SaveExploits0References1
Rows per page
Query Builder