Lucene search
+L

3134 matches found

Wired Threat Level
Wired Threat Level
added 2023/11/25 2:0 p.m.14 views

How to Stop Google From Deleting Your Inactive Account

Your inactive profiles, like Gmail or Docs, could turn into digital dust later this year. A few clicks can save them...

7.3AI score
SaveExploits0
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.7 views

WordPress Plugin Community by PeepSo - Social Network, Membership, Registration, User Profiles Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

8.8CVSS6.4AI score0.00254EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/18 10:15 p.m.32 views

CVE-2023-47644

Cross-Site Request Forgery CSRF vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6...

8.8CVSS0.0028EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/18 10:15 p.m.6 views

CVE-2023-47644

Cross-Site Request Forgery CSRF vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6...

8.8CVSS7.3AI score0.0028EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/18 10:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6...

6.8CVSS7.2AI score0.0028EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/18 9:31 p.m.68 views

CVE-2023-47644

The CVE-2023-47644 entry is valid and affects the WordPress plugin ProfileGrid – User Profiles, Memberships, Groups and Communities (v5.6.6 and earlier). It is a Cross-Site Request Forgery (CSRF) vulnerability with unauthenticated impact. The issue stems from CSRF protection gaps in ProfileGrid, ...

8.8CVSS8AI score0.0028EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/18 12:0 a.m.12 views

PT-2023-30532 · Unknown · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid – User Profiles, Memberships, Groups and Communities versions 5.6.6 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user...

8.8CVSS8.6AI score0.0028EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/18 12:0 a.m.6 views

WordPress Plugin ProfileGrid - User Profiles, Memberships, Groups and Communities Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS6.5AI score0.0028EPSS
SaveExploits0References2
Redos
Redos
added 2023/11/15 12:0 a.m.47 views

ROS-20231114-01

A vulnerability in the Blink Media component of the Google Chrome browser is related to memory usage after it has been after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the Blink Frames component of Goog...

9.6CVSS8.1AI score0.31864EPSS
SaveExploits1
OSV
OSV
added 2023/11/14 3:14 p.m.14 views

OPENSUSE-SU-2023:0368-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 119.0.6045.123 boo1216978 CVE-2023-5996: Use after free in WebAudio Chromium 119.0.6045.105 boo1216783 CVE-2023-5480: Inappropriate implementation in Payments CVE-2023-5482: Insufficient data validation in USB CVE-2023-5849: Integer...

8.8CVSS9.5AI score0.06757EPSS
SaveExploits0References17
NVD
NVD
added 2023/11/13 2:15 a.m.33 views

CVE-2023-47669

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin = 3.10.3 versions...

8.8CVSS0.00254EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/13 2:15 a.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin = 3.10.3 versions...

6.8CVSS7.2AI score0.00254EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/13 12:55 a.m.61 views

CVE-2023-47669

CVE-2023-47669 is a CSRF vulnerability in the WordPress plugin “User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor” by Cozmoslabs, affecting versions prior to 3.10.3. The issue allows cross-site request forgery without authentication (per Patchstack/CVE rec...

8.8CVSS7AI score0.00254EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/13 12:55 a.m.35 views

CVE-2023-47669 WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin = 3.10.3 versions...

5.4CVSS9AI score0.00254EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/09 11:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin = 6.0.9.0 versions...

6.8CVSS7.2AI score0.00331EPSS
SaveExploits0References1Affected Software1
Metasploit
Metasploit
added 2023/11/09 7:51 p.m.320 views

Windows Gather PL/SQL Developer Connection Credentials

This module can decrypt the histories and connection credentials of PL/SQL Developer, and passwords are available if the user chooses to remember. Module Options msf use post/windows/gather/credentials/plsqldeveloper msf postplsqldeveloper show actions ...actions... msf postplsqldeveloper set...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2023/11/09 12:0 a.m.8 views

WordPress Plugin Community by PeepSo - Social Network, Membership, Registration, User Profiles Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Community by PeepSo - Social Network,...

8.8CVSS6.5AI score0.00331EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.27 views

Fedora 39 : chromium (2023-0b39dc9302)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b39dc9302 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 ---- Update to 118.0.5993.88 ---- Update to 118.0.5993.70. Include following security...

8.8CVSS7.4AI score0.01738EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
added 2023/11/03 12:0 a.m.109 views

Microsoft Edge (Chromium) < 118.0.2088.88 / 119.0.2151.44 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.88 / 119.0.2151.44. It is, therefore, affected by multiple vulnerabilities as referenced in the November 2, 2023 advisory. - Microsoft Edge Chromium-based Remote Code Execution Vulnerability CVE-2023-36022,...

8.8CVSS7.2AI score0.06757EPSS
SaveExploits0References33
Veracode
Veracode
added 2023/11/02 6:39 p.m.24 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Profiles component of the library which allows an attacker to convince user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures...

8.8CVSS7.2AI score0.01124EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder