Lucene search
+L

12269 matches found

Code423n4
Code423n4
added 2024/01/08 12:00 a.m.32 views

Olas can be locked less than 1 week

Lines of code Vulnerability details Impact The minimum lock time for OLAS is 1 week. If a user locks their OLAS for a duration less than that, their voting power becomes zero. However, in OLAS:createLockFor, the system only checks if the unlockTime is greater than the block.timestamp. Consequentl...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.10 views

PT-2024-14202 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a malicious page...

7.8CVSS7.2AI score0.00541EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.12 views

PT-2024-14204 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a...

5.5CVSS6.9AI score0.00461EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2024/01/04 12:00 a.m.22 views

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS6.3AI score0.00461EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/04 12:00 a.m.25 views

Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XPS...

7.8CVSS7.2AI score0.00541EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.10 views

PT-2024-14201 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a...

5.5CVSS6.9AI score0.00461EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2024/01/04 12:00 a.m.20 views

Kofax Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS6.3AI score0.00461EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/04 12:00 a.m.20 views

Kofax Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS7.2AI score0.00486EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.13 views

PT-2024-14200 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the target must...

7.8CVSS7.2AI score0.00541EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2024/01/04 12:00 a.m.23 views

Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XP...

7.8CVSS7.2AI score0.00541EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.14 views

PT-2024-14205 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a...

3.3CVSS6.8AI score0.00497EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/03 5:01 p.m.27 views

Security Bulletin: Vulnerability in Golang Go affects IBM Cloud Pak System.

Summary Vulnerability in Golang Go affects IBM Cloud Pak SystemCVE-2022-41724. Vulnerability Details CVEID:CVE-2022-41724 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw when processing large TLS handshake records. By sending specially-crafted TLS handshake records, ...

7.5CVSS8.3AI score0.01111EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/01 12:00 a.m.22 views

PT-2024-12379 · Unknown · Hypervisor

Name of the Vulnerable Software and Affected Versions: Hypervisor affected versions not specified Description: The issue involves a permanent denial of service DOS in the Hypervisor when an untrusted virtual machine VM without Power State Coordination Interface PSCI support makes a PSCI call. Thi...

7.1CVSS7.6AI score0.00105EPSS
SaveExploits0References6
NVD
NVD
added 2023/12/29 3:15 p.m.22 views

CVE-2023-51527

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.2...

7.5CVSS0.0048EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/29 3:15 p.m.13 views

CVE-2023-51527

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.2...

7.5CVSS7.3AI score0.0048EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/29 3:15 p.m.22 views

Code injection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.2...

5CVSS7.1AI score0.0048EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/29 2:58 p.m.18 views

CVE-2023-51527 WordPress GPT3 AI Content Writer Plugin <= 1.8.2 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.2...

5.3CVSS6.8AI score0.0048EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/29 2:58 p.m.37 views

CVE-2023-51527 WordPress GPT3 AI Content Writer Plugin <= 1.8.2 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.2...

5.3CVSS7.7AI score0.0048EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/29 2:58 p.m.78 views

CVE-2023-51527

CVE-2023-51527 describes an Exposure of Sensitive Information to an Unauthorized Actor in the plugin AI Power: Complete AI Pack – Powered by GPT-4 . Reports indicate the vulnerability affects versions up to 1.8.2 and allows an unauthorized actor to access sensitive data. Related connected records...

7.5CVSS7.8AI score0.0048EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/29 12:00 a.m.11 views

WordPress Plugin AI Power Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure vulnerabilit...

7.5CVSS6.2AI score0.0048EPSS
SaveExploits0References2
Rows per page
Query Builder