Lucene search
+L

3028 matches found

CNNVD
CNNVD
added 2024/05/14 12:0 a.m.8 views

eProsima Fast DDS 缓冲区错误漏洞

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS that stems from a heap buffer overflow that occurs when a publisher provides an incorrectly formatted RTPS packet...

8.2CVSS6.9AI score0.00866EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.8 views

WordPress plugin Podlove Podcast Publisher 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

7.5CVSS6.5AI score0.00408EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/13 2:45 p.m.28 views

CVE-2024-30259 FastDDS heap buffer overflow when publisher sends malformed packet

FastDDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed RTPS packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS...

8.2CVSS8.7AI score0.00866EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/05/13 2:41 p.m.24 views

CVE-2024-30258 FastDDS crash when publisher send malformed packet

FastDDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed RTPS packet, the subscriber crashes when creating pthread. This can remotely crash any Fast-DD...

8.2CVSS6.8AI score0.00791EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/05/09 12:25 p.m.22 views

CVE-2024-32712 WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.14...

7.5CVSS7.7AI score0.00408EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/09 12:25 p.m.15 views

CVE-2024-32712 WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.14...

7.5CVSS5.1AI score0.00408EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/09 12:25 p.m.5 views

CVE-2024-32712 WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.14...

7.5CVSS5.9AI score0.00408EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.7 views

PT-2024-24800 · Unknown · Podlove Podcast Publisher

Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher versions through 4.0.14 Description: The issue is related to a Missing Authorization vulnerability in Podlove Podcast Publisher. Recommendations: For versions through 4.0.14, update to a version later than 4.0.14 to...

7.5CVSS6.5AI score0.00408EPSS
SaveExploits0References6
WPVulnDB
WPVulnDB
added 2024/04/30 12:0 a.m.15 views

Podlove Podcast Publisher < 4.0.12 - Authenticated (Contributor+) Server-Side Request Forgery

Description The Podlove Podcast Publisher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.11 via the fetchurlmeta function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests...

5.4CVSS6.7AI score0.00381EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/30 12:0 a.m.16 views

Podlove Podcast Publisher < 4.0.15 - Cross-Site Request Forgery

Description The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.14. This is due to missing or incorrect nonce validation on the jobcreate and jobdelete functions. This makes it possible for unauthenticated...

7.5CVSS6.6AI score0.00408EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/30 12:0 a.m.7 views

The vulnerability of the Script Engine component of the Oracle BI Publisher software allows a perpetrator to execute arbitrary code.

The vulnerability of the Script Engine component of the Oracle BI Publisher reporting software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.6AI score0.00684EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/30 12:0 a.m.14 views

The vulnerability of the XML Services component of the Oracle BI Publisher software allows a hacker to execute arbitrary code.

The vulnerability of the XML Services component of the Oracle BI Publisher reporting tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.6AI score0.00807EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2024/04/24 8:15 a.m.16 views

CVE-2024-32812

Server-Side Request Forgery SSRF vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.11...

5.4CVSS5.5AI score0.00381EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/24 7:14 a.m.25 views

CVE-2024-32812 WordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.11...

5.4CVSS5.8AI score0.00381EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/24 7:14 a.m.14 views

CVE-2024-32812 WordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.11...

5.4CVSS7AI score0.00381EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/24 7:14 a.m.7 views

CVE-2024-32812 WordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.11...

5.4CVSS5.9AI score0.00381EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/04/24 12:0 a.m.7 views

WordPress plugin Podlove Podcast Publisher 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

5.4CVSS7.1AI score0.00381EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/24 12:0 a.m.7 views

PT-2024-24886 · Unknown · Podlove Podcast Publisher

Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher versions 4.0.11 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means that an attacker could potentially force the server to make unintended requests, potentially leading ...

5.4CVSS6.5AI score0.00381EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/04/22 2:56 p.m.8 views

WordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Podlove Podcast Publisher versions = 4.0.11...

5.4CVSS7AI score0.00381EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/22 11:28 a.m.8 views

WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Podlove Podcast Publisher versions = 4.0.14...

7.5CVSS7AI score0.00408EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder