Lucene search
K

2115 matches found

Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.4 views

PT-2025-49437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the 9p protocol’s handling of file descriptors. Specifically, the p9 fd request function may not correctly kick the receive thread when EPOLL...

4.4CVSS5.4AI score0.00145EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/08/18 2:37 a.m.9 views

CVE-2024-12575

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'aysfinishpoll' AJAX action. This makes it possible for unauthenticated attackers to retrieve admin email information...

5.3CVSS6.9AI score0.00255EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.3 views

CVE-2025-49044

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

7.1CVSS5.9AI score0.00118EPSS
Exploits0References1
NVD
NVD
added 2025/08/16 3:15 a.m.4 views

CVE-2024-12575

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'aysfinishpoll' AJAX action. This makes it possible for unauthenticated attackers to retrieve admin email information...

5.3CVSS0.00255EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/16 2:24 a.m.2 views

CVE-2024-12575 Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'aysfinishpoll' AJAX action. This makes it possible for unauthenticated attackers to retrieve admin email information...

5.3CVSS6.8AI score0.00255EPSS
Exploits0References2
CVE
CVE
added 2025/08/16 2:24 a.m.16 views

CVE-2024-12575

CVE-2024-12575 relates to the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (≤ 5.8.9). The vulnerability is an unauthenticated basic information exposure exposed via the ajax action ays_finish_poll, allowing attackers to retrieve admin email information from poll respon...

5.3CVSS6.7AI score0.00255EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/16 2:24 a.m.7 views

CVE-2024-12575 Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'aysfinishpoll' AJAX action. This makes it possible for unauthenticated attackers to retrieve admin email information...

5.3CVSS0.00255EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/16 12:0 a.m.1 views

WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Poll Maker - Versus...

5.3CVSS6.2AI score0.00255EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/08/16 12:0 a.m.6 views

PT-2025-33517 · WordPress · The Poll Maker – Versus Polls

Name of the Vulnerable Software and Affected Versions: Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress versions up to and including 5.8.9 Description: The WordPress plugin is susceptible to Basic Information Exposure via the ays finish poll API endpoint. This allows...

5.3CVSS6.3AI score0.00255EPSS
Exploits0References7
Patchstack
Patchstack
added 2025/08/15 11:26 p.m.6 views

WordPress Poll Maker plugin <= 5.8.9 - Unauthenticated Basic Information Exposure vulnerability

Unauthenticated Basic Information Exposure vulnerability discovered by xiaoAGiao in WordPress Plugin Poll Maker versions = 5.8.9...

5.3CVSS6.7AI score0.00255EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/08/14 11:15 a.m.2 views

CVE-2025-49044

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

7.1CVSS0.00118EPSS
Exploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.13 views

CVE-2025-49044

CVE-2025-49044 is a CSRF-to-Stored XSS vulnerability in the WordPress Simple Poll plugin prior to or up to version 1.1.1. The issue affects Simple Poll by Tosend.it and is documented with CVSS v3.1 base score 7.1 (HIGH) with network attack vector, low attack complexity, no privileges required, us...

7.1CVSS5.9AI score0.00118EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.9 views

CVE-2025-49044 WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

7.1CVSS0.00118EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.2 views

CVE-2025-49044 WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in tosend.it Simple Poll simple-poll allows Stored XSS.This issue affects Simple Poll: from n/a through = 1.1.1...

7.1CVSS5.9AI score0.00118EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/08/14 7:31 a.m.4 views

WordPress Simple Poll plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by TAKERU OTSUKA Patchstack Alliance in WordPress Plugin Simple Poll versions = 1.1.1...

7.1CVSS6AI score0.00118EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.3 views

PT-2025-33179 · Unknown · Tosend.It Simple Poll

Name of the Vulnerable Software and Affected Versions: tosend.it Simple Poll versions through 1.1.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in tosend.it Simple Poll, which also allows Stored Cross-Site Scripting XSS. Recommendations: At the moment, there is no...

7.1CVSS6AI score0.00118EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.2 views

WordPress plugin Simple Poll 请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS5.9AI score0.00118EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-22086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching the QP from the radix tree again we check if the next cqe QP is...

5.5CVSS6.7AI score0.00174EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-52895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/poll: don't reissue in case of poll race on multishot request A previous commit fixe...

5.5CVSS5.2AI score0.00205EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-0468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Linux Kernel due to a race condition of pollrefs. This...

4.7CVSS6.2AI score0.0028EPSS
Exploits1References2
Rows per page
Query Builder