Lucene search
+L

3672 matches found

CNNVD
CNNVD
added 2024/06/12 12:00 a.m.13 views

WordPress plugin Piotnet Forms security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.8AI score0.00295EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/11 2:15 a.m.13 views

CVE-2024-37130

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

7.8CVSS5.8AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/11 12:00 a.m.10 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in versions prior to Google Chrome 126.0.6478.54, which can be exploited by attackers to cause heap corruption via a crafted HTML page...

8.8CVSS9.2AI score0.00482EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/06/11 12:00 a.m.10 views

WordPress plugin Slider by Soliloquy Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS6.8AI score0.00372EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/06/11 12:00 a.m.10 views

PT-2024-4232 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Description: The issue is related to a policy bypass in the CORS mechanism, which can be exploited by a remote attacker to bypass discretionary access control. This can be achieved through a craft...

9.8CVSS6.4AI score0.99979EPSS
SaveExploits130References1158
Positive Technologies
Positive Technologies
added 2024/06/11 12:00 a.m.9 views

PT-2024-4244 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Audio component, which could allow a remote attacker to exploit heap corruption via a...

9.8CVSS6.9AI score0.99979EPSS
SaveExploits130References1157
CNNVD
CNNVD
added 2024/06/11 12:00 a.m.9 views

WordPress plugin BookingPress security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.8AI score0.00368EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/10 12:00 a.m.8 views

WordPress plugin 12 Step Meeting List security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

8.8CVSS6.7AI score0.00335EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.10 views

WordPress plugin WooCommerce Dropshipping security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.7AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/09 12:00 a.m.16 views

PT-2024-14496 · Pluggabl Llc · Booster Plus For Woocommerce

Name of the Vulnerable Software and Affected Versions: Booster Plus for WooCommerce versions prior to 7.1.2 Description: The issue is related to a Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce. Recommendations: For versions prior to 7.1.2, update to version 7.1....

6.5CVSS7.1AI score0.00339EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.6 views

WordPress plugin Events Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.7AI score0.00323EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/09 12:00 a.m.14 views

PT-2024-14494 · Pluggabl Llc · Booster Plus For Woocommerce

Name of the Vulnerable Software and Affected Versions: Booster Plus for WooCommerce versions prior to 7.1.3 Description: The issue is related to a Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce. Recommendations: For versions prior to 7.1.3, update to version 7.1....

6.5CVSS7.1AI score0.00353EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/09 12:00 a.m.10 views

WordPress plugin WooCommerce Product Vendors security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

9.8CVSS6.7AI score0.00365EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/08 12:00 a.m.10 views

WordPress plugin Icegram security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS6.7AI score0.00296EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/07 12:00 a.m.17 views

PT-2024-5461 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.182 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Navigation function, which could allow an attacker to exploit heap corruption via a...

10CVSS7.3AI score0.99979EPSS
SaveExploits134References1118
NVD
NVD
added 2024/06/06 12:15 a.m.29 views

CVE-2024-0912

Under certain circumstances the Microsoft® Internet Information Server IIS used to host the C•CURE 9000 Web Server will log Microsoft Windows credential details within logs. There is no impact to non-web service interfaces C•CURE 9000 or prior versions...

8.5CVSS6.5AI score0.00164EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/06 12:00 a.m.16 views

WordPress plugin Colibri Page Builder security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.6AI score0.00322EPSS
SaveExploits0References4
OSV
OSV
added 2024/05/31 6:15 p.m.5 views

CVE-2024-29823

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code...

8.8CVSS6.1AI score0.9986EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/30 4:15 p.m.12 views

AZL-42465 CVE-2024-36893 affecting package kernel for versions less than 6.6.35.1-4

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Check for port partner validity before consuming it typecregisterpartner does not guarantee partner registration to always succeed. In the event of failure, port-partner is set to the error value or NULL. Given...

5.5CVSS6.7AI score0.00227EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/29 2:15 p.m.7 views

CVE-2024-36363

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possible...

5.4CVSS5.8AI score0.00267EPSS
SaveExploits0References1
Rows per page
Query Builder