Lucene search
+L

4410 matches found

Prion
Prion
•added 2024/03/07 12:15 p.m.•32 views

Design/Logic Flaw

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...

4CVSS7.2AI score0.0052EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/07 11:39 a.m.•36 views

CVE-2024-28229

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...

6.5CVSS6.7AI score0.0052EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•4 views

CVE-2024-28229: Incorrect Authorization

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...

6.5CVSS5.7AI score0.0052EPSS
SaveExploits0References3
OSV
OSV
•added 2024/03/06 11:07 a.m.•113 views

BIT-SOLR-2020-13941

Reported in SOLR-14515 private and fixed in SOLR-14561 public, released in Solr version 8.6.0. The Replication handler https://lucene.apache.org/solr/guide/86/index-replication.htmlhttp-api-commands-for-the-replicationhandler allows commands backup, restore and deleteBackup. Each of these take a...

8.8CVSS8.7AI score0.03924EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/03/06 12:00 a.m.•17 views

PT-2024-15238 · WordPress · Backup/Restore Wordpress – Backup Plugin

Name of the Vulnerable Software and Affected Versions: Backup and Restore WordPress plugin versions 1.45 and earlier Description: The issue allows unauthenticated users to access sensitive information, such as site configuration, by not protecting some log files. This poses a severe threat to...

5.3CVSS6.3AI score0.00565EPSS
SaveExploits2References8
OSV
OSV
•added 2024/03/05 12:15 p.m.•10 views

UBUNTU-CVE-2022-48630

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests not multiple of WORDSZ The commit referenced in the Fixes tag removed the 'break' from the else branch in qcomrngread, causing an infinite loop whenever 'max' is not a multiple of...

5.5CVSS6.1AI score0.00228EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2024/03/05 12:00 a.m.•18 views

The vulnerability of the application software interface for backup/restore services provided by the Apache Solr search server allows a hacker to execute arbitrary code within the system.

The vulnerability of the application programming interface for backup/restore services provided by the Apache Solr search server lies in the lack of restrictions on the loading of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the system remotely...

9CVSS7.8AI score0.83719EPSS
SaveExploits4References3Affected Software1
WPVulnDB
WPVulnDB
•added 2024/03/05 12:00 a.m.•26 views

Backup and Restore WordPress < 1.50 - Unauthenticated Sensitive Data Exposure

Description The plugin does not protect some log files containing sensitive information such as site configuration etc, allowing unauthenticated users to access such data. PoC 1 There is a lot of sensitive data and most importantly, you can download this logs to your machine and read it. These...

6AI score0.00565EPSS
SaveExploits2Affected Software1
GithubExploit
GithubExploit
•added 2024/02/29 8:57 a.m.•911 views

Exploit for Improper Control of Dynamically-Managed Code Resources in Apache Solr

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restor...

8.8CVSS7.3AI score0.83719EPSS
SaveExploits4
OSV
OSV
•added 2024/02/29 7:15 a.m.•14 views

CVE-2024-1982

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the getrestoreprogress and restore functions in all versions up to, and including, 0.9.68. This makes it possible for unauthenticated attackers to exploit a SQL...

9.1CVSS7.3AI score0.00825EPSS
SaveExploits1References3
NVD
NVD
•added 2024/02/29 1:43 a.m.•34 views

CVE-2024-0907

The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the restorerecords function in all versions up to, and including, 8.5.6. This makes it possible for authenticated attackers, with...

5.3CVSS5AI score0.00593EPSS
SaveExploits0References7
OSV
OSV
•added 2024/02/29 1:43 a.m.•18 views

CVE-2024-0907

The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the restorerecords function in all versions up to, and including, 8.5.6. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00593EPSS
SaveExploits0References7
Prion
Prion
•added 2024/02/29 1:43 a.m.•51 views

Design/Logic Flaw

The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the restorerecords function in all versions up to, and including, 8.5.6. This makes it possible for authenticated attackers, with...

5CVSS7AI score0.00593EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•14 views

WordPress Plugin Migration, Backup, Staging Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

9.1CVSS6.6AI score0.00825EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•22 views

WordPress Plugin NEX-Forms Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.7AI score0.00593EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/02/29 12:00 a.m.•11 views

PT-2024-18470 · WordPress · Wpvivid

Name of the Vulnerable Software and Affected Versions: Migration, Backup, Staging – WPvivid plugin for WordPress versions up to, and including, 0.9.68 Description: The issue is related to a missing capability check on the get restore progress and restore functions, allowing unauthorized access...

9.1CVSS9.7AI score0.00825EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/29 12:00 a.m.•5 views

CVE-2024-1982: Missing Authorization

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the getrestoreprogress and restore functions in all versions up to, and including, 0.9.68. This makes it possible for unauthenticated attackers to exploit a SQL...

9.1CVSS5.8AI score0.00825EPSS
SaveExploits1References3
Fedora
Fedora
•added 2024/02/21 1:33 a.m.•39 views

[SECURITY] Fedora 39 Update: rear-2.7-8.fc39

Relax-and-Recover is the leading Open Source disaster recovery and system migration solution. It comprises of a modular frame-work and ready-to-go workflows for many common situations to produce a bootable image and restore from backup using this image. As a benefit, it allows to restore to...

5.5CVSS5.5AI score0.00291EPSS
SaveExploits1
Citrix
Citrix
•added 2024/02/20 12:00 a.m.•39 views

Warning:Table chb_State.Workers object definition does not match the expected reference schema

The Site test Report shows a warning "Table chbState.Workers object definition does not match the expected reference schema" CDF traces captured from the DDC while running the Ste test show the below messages:...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2024/02/14 6:44 p.m.•81 views

Critical: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.5 security and bug fix container updates

Red Hat Advanced Cluster Management for Kubernetes 2.8.5 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.8CVSS7.9AI score0.0151EPSS
SaveExploits0References19
Rows per page
Query Builder