Lucene search
+L

7768 matches found

Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•225 views

WordPress 4.6.x < 4.6.2 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

9.8CVSS7.8AI score0.99714EPSS
SaveExploits69References11
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•89 views

WordPress 3.9.x < 3.9.15 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

9.8CVSS7.8AI score0.99714EPSS
SaveExploits69References11
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•38 views

WordPress 3.7.x < 3.7.18 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the class-wp-press-this.php script due to a failure to properly restrict the user interface for assigning taxonomy terms...

9.8CVSS9AI score0.84935EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•51 views

WordPress 4.5.x < 4.5.6 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the class-wp-press-this.php script due to a failure to properly restrict the user interface for assigning taxonomy terms...

9.8CVSS9AI score0.84935EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•46 views

WordPress 4.3.x < 4.3.8 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the class-wp-press-this.php script due to a failure to properly restrict the user interface for assigning taxonomy terms...

9.8CVSS9AI score0.84935EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•129 views

WordPress 3.9.x < 3.9.16 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the class-wp-press-this.php script due to a failure to properly restrict the user interface for assigning taxonomy terms...

9.8CVSS9AI score0.84935EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•92 views

WordPress 3.7.x < 3.7.17 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

9.8CVSS7.8AI score0.99714EPSS
SaveExploits69References11
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•47 views

WordPress 3.8.x < 3.8.18 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the class-wp-press-this.php script due to a failure to properly restrict the user interface for assigning taxonomy terms...

9.8CVSS9AI score0.84935EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•111 views

WordPress 4.5.x < 4.5.5 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

9.8CVSS7.8AI score0.99714EPSS
SaveExploits69References11
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•67 views

WordPress 4.4.x < 4.4.6 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

9.8CVSS7.8AI score0.99714EPSS
SaveExploits69References11
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•49 views

WordPress 4.2.x < 4.2.11 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

9.8CVSS7.8AI score0.99714EPSS
SaveExploits69References11
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•48 views

WordPress 3.8.x < 3.8.17 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

9.8CVSS7.8AI score0.99714EPSS
SaveExploits69References11
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•39 views

WordPress 4.2.x < 4.2.12 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the class-wp-press-this.php script due to a failure to properly restrict the user interface for assigning taxonomy terms...

9.8CVSS9AI score0.84935EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•60 views

WordPress 4.1.x < 4.1.14 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

9.8CVSS7.8AI score0.99714EPSS
SaveExploits69References11
NVD
NVD
•added 2018/11/01 5:29 p.m.•33 views

CVE-2018-6907

A Cross Site Request Forgery CSRF vulnerability in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API...

8.8CVSS8.8AI score0.00494EPSS
SaveExploits1References1
Prion
Prion
•added 2018/11/01 5:29 p.m.•22 views

Cross site scripting

A persistent Cross Site Scripting XSS vulnerability in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API...

4.3CVSS6AI score0.00675EPSS
SaveExploits1References1
NVD
NVD
•added 2018/11/01 5:29 p.m.•24 views

CVE-2018-6906

A persistent Cross Site Scripting XSS vulnerability in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API...

6.1CVSS6AI score0.00675EPSS
SaveExploits1References1
Prion
Prion
•added 2018/11/01 5:29 p.m.•24 views

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API...

6.8CVSS8.7AI score0.00494EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/11/01 5:00 p.m.•32 views

CVE-2018-6907

A Cross Site Request Forgery CSRF vulnerability in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API...

8.8AI score0.00494EPSS
SaveExploits1References1
CVE
CVE
•added 2018/11/01 5:00 p.m.•62 views

CVE-2018-6907

The CVE-2018-6907 entry describes a CSRF vulnerability in Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application that could allow an attacker to control the RainMachine device via its REST API. Documents consistently identify the affected components as the RainMachi...

8.8CVSS8.7AI score0.00494EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder