Lucene search
K

2117 matches found

CNNVD
CNNVD
added 2025/01/02 12:0 a.m.4 views

WordPress plugin YOP Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.9AI score0.00398EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.5 views

WordPress plugin Poll Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.7AI score0.00337EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2026-4362

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s io uring/poll subsystem where the handling of io poll add return values during updates is incorrect. Specifically, if a POLL ADD is pending and a PO...

5.5CVSS6.1AI score0.00018EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.5 views

PT-2026-2878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's block layer related to request queue freezing within sysfs store callbacks. Freezing the request queue during these callbacks can lead to a deadlock...

7.8CVSS5.4AI score0.00173EPSS
Exploits0References169
OSV
OSV
added 2024/12/27 3:6 p.m.7 views

CVE-2024-56674 virtio_net: correct netdev_tx_reset_queue() invocation point

In the Linux kernel, the following vulnerability has been resolved: virtionet: correct netdevtxresetqueue invocation point When virtnetclose is followed by virtnetopen, some TX completions can possibly remain unconsumed, until they are finally processed during the first NAPI poll after the...

5.5CVSS5.9AI score0.00196EPSS
Exploits0References5
NVD
NVD
added 2024/12/18 8:15 p.m.14 views

CVE-2024-52592

Misskey is an open source, federated social media platform. In affected versions missing validation in ApInboxService.update allows an attacker to modify the result of polls belonging to another user. No authentication is required, except for a valid signature from any actor on any remote instanc...

6.9CVSS0.00292EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/18 7:19 p.m.18 views

CVE-2024-52592 Missing validation allows spoofed poll updates in Misskey

Misskey is an open source, federated social media platform. In affected versions missing validation in ApInboxService.update allows an attacker to modify the result of polls belonging to another user. No authentication is required, except for a valid signature from any actor on any remote instanc...

6.9CVSS0.00292EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/18 7:19 p.m.5 views

CVE-2024-52592 Missing validation allows spoofed poll updates in Misskey

Misskey is an open source, federated social media platform. In affected versions missing validation in ApInboxService.update allows an attacker to modify the result of polls belonging to another user. No authentication is required, except for a valid signature from any actor on any remote instanc...

6.9CVSS7AI score0.00292EPSS
Exploits0References1
CVE
CVE
added 2024/12/18 7:19 p.m.80 views

CVE-2024-52592

CVE-2024-52592 – Misskey : Misskey versions prior to 2024.11.0-alpha.3 suffer from missing validation in the ApInboxService.update function, allowing an attacker to modify poll results belonging to another user without authentication beyond a valid signature from any actor on any remote instance....

6.9CVSS6.7AI score0.00292EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.3 views

Misskey 输入验证错误漏洞

Misskey is a perpetually free open source federated social media platform from Misskey Open Source. An input validation error vulnerability exists in Misskey versions 10.92.1 through prior to 2024.11.0-alpha.3, which stems from a lack of authentication that allows an attacker to modify the result...

6.9CVSS6.7AI score0.00292EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/12/15 7:36 a.m.4 views

WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Poll Maker versions = 5.5.0...

9.8CVSS7AI score0.00345EPSS
Exploits0Affected Software1
NVD
NVD
added 2024/12/13 3:15 p.m.8 views

CVE-2024-54276

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devfelixmoira Poll Builder poll-builder allows Stored XSS.This issue affects Poll Builder: from n/a through = 1.3.5...

6.5CVSS0.00384EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/12/13 3:15 p.m.6 views

CVE-2023-36531

Missing Authorization vulnerability in liquidpoll LiquidPoll wp-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll: from n/a through = 3.3.68...

4.3CVSS5.8AI score0.00856EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.4 views

CVE-2024-54276 WordPress Poll Builder plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Felix Moira Poll Builder allows Stored XSS.This issue affects Poll Builder: from n/a through 1.3.5...

6.5CVSS6.8AI score0.00384EPSS
Exploits0References1
CVE
CVE
added 2024/12/13 2:24 p.m.36 views

CVE-2024-54276

CVE-2024-54276 is a stored XSS in the Poll Builder (WordPress plugin) used forPolls; the affected range is Poll Builder up to version 1.3.5 (no fixed patch documented in provided sources). The vulnerability arises from improper neutralization during web page generation, enabling stored script exe...

6.5CVSS7.2AI score0.00384EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.16 views

CVE-2024-54276 WordPress Poll Builder plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devfelixmoira Poll Builder poll-builder allows Stored XSS.This issue affects Poll Builder: from n/a through = 1.3.5...

6.5CVSS0.00384EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.3 views

WordPress plugin Poll Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8.1AI score0.00384EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/12/11 3:59 p.m.5 views

WordPress Poll Builder plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Poll Builder versions = 1.3.5...

6.5CVSS6.1AI score0.00384EPSS
Exploits0Affected Software1
OSV
OSV
added 2024/12/09 1:15 p.m.2 views

CVE-2023-50904

Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 4.8.0...

5.3CVSS5.8AI score0.00646EPSS
Exploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.20 views

CVE-2023-50904

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 4.8.0...

5.3CVSS0.00646EPSS
Exploits0References1
Rows per page
Query Builder