Lucene search
+L

3700 matches found

CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•20 views

WordPress plugin Quick Paypal Payments 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS8.8AI score0.00764EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•4 views

CVE-2023-25035: Missing Authorization

Missing Authorization vulnerability in Fullworks Quick Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Contact Form : from n/a through 8.0.3.1...

6.5CVSS7.9AI score0.00714EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•7 views

CVE-2023-23975: Missing Authorization

Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Event Manager: from n/a through 9.7.4...

5.3CVSS5.9AI score0.00658EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•7 views

CVE-2023-25714: Missing Authorization

Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 5.7.25...

7.5CVSS8.3AI score0.00764EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•14 views

WordPress plugin WP Quick Post Duplicator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.8AI score0.00346EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•17 views

WordPress plugin Quick Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS8.1AI score0.00714EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•4 views

PT-2024-12013

Name of the Vulnerable Software and Affected Versions Fullworks Quick Event Manager versions through 9.7.4 Description The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations For versions throug...

5.3CVSS0.00658EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•9 views

CVE-2023-31214: Missing Authorization

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through 2.0...

5.4CVSS8.3AI score0.00346EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/03 8:15 a.m.•33 views

CVE-2024-11805

The Quick License Manager – WooCommerce Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'submitqlmproducts' parameter in all versions up to, and including, 2.4.17 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS0.00267EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/03 7:35 a.m.•71 views

CVE-2024-11805

CVE-2024-11805 refers to the WordPress plugin “Quick License Manager – WooCommerce Plugin” which is vulnerable to a Reflected Cross‑Site Scripting (XSS) due to insufficient input sanitization and output escaping in the submit_qlm_products parameter. Affected versions: all up to and including 2.4....

6.1CVSS6AI score0.00267EPSS
SaveExploits0References2
NVD
NVD
•added 2024/12/03 6:15 a.m.•29 views

CVE-2024-49421

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location...

4.3CVSS0.00344EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/03 6:15 a.m.•18 views

CVE-2024-49421

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location...

4.3CVSS5.9AI score0.00344EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/03 5:48 a.m.•32 views

CVE-2024-49421

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location...

4.3CVSS0.00344EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/03 5:48 a.m.•21 views

CVE-2024-49421

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location...

4.3CVSS7.1AI score0.00344EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/03 5:48 a.m.•74 views

CVE-2024-49421

CVE-2024-49421 describes a path traversal flaw in Samsung Quick Share Agent. Affected: Android 12 (before 3.5.14.47), Android 13 (before 3.5.19.41), Android 14 (before 3.5.19.42). Root cause: improper validation of user-supplied path leading to arbitrary file writes. Impact: adjacent attackers co...

4.3CVSS4.8AI score0.00344EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/03 12:00 a.m.•19 views

PT-2024-17261 · WordPress · Quick License Manager – Woocommerce Plugin

Name of the Vulnerable Software and Affected Versions: Quick License Manager – WooCommerce Plugin plugin for WordPress versions up to, and including, 2.4.17 Description: The issue is related to Reflected Cross-Site Scripting via the submit qlm products parameter due to insufficient input...

6.1CVSS6.6AI score0.00267EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/12/03 12:00 a.m.•17 views

SAMSUNG Quick Share 安全漏洞

SAMSUNG Quick Share is a sharing service from the South Korean company Samsung SAMSUNG. It is used to send photos, videos and files with your friends and family. A security vulnerability exists in SAMSUNG Quick Share that stems from the presence of path traversal, which allows a neighboring...

4.3CVSS6.8AI score0.00344EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/03 12:00 a.m.•6 views

CVE-2024-11805: Improper Neutralization of Input During Web Page Generation

The Quick License Manager – WooCommerce Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'submitqlmproducts' parameter in all versions up to, and including, 2.4.17 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS6AI score0.00267EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/03 12:00 a.m.•9 views

CVE-2024-49421: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location...

4.3CVSS5.9AI score0.00344EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/03 12:00 a.m.•21 views

PT-2024-33532 · Google · Android 12 +2

Name of the Vulnerable Software and Affected Versions: Quick Share Agent versions prior to 3.5.14.47 in Android 12 Quick Share Agent versions prior to 3.5.19.41 in Android 13 Quick Share Agent versions prior to 3.5.19.42 in Android 14 Description: The issue allows adjacent attackers to write file...

4.3CVSS6.5AI score0.00344EPSS
SaveExploits0References7
Rows per page
Query Builder