Lucene search
+L

1737 matches found

CNNVD
CNNVD
•added 2023/07/12 12:00 a.m.•21 views

WordPress Plugin 10WebAnalytics 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS5AI score0.00393EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2023/07/12 12:00 a.m.•37 views

WordPress Plugin Forminator – Contact Form, Payment Form & Custom Form Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

5.4CVSS5AI score0.00426EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2023/07/12 12:00 a.m.•20 views

WordPress Plugin Process Steps Template Designer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

4.3CVSS5AI score0.00384EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2023/07/07 12:00 a.m.•16 views

CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

7AI score0.00962EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/07/07 12:00 a.m.•20 views

TravianZ 安全特征问题漏洞

TravianZ is a free-to-play, in-browser, web-based strategy game from German company Travian. A security vulnerability exists in TravianZ version 8.3.4, 8.3.3, which stems from a cryptographically insecure random number generator used in the password reset function allowing an attacker to guess th...

9.8CVSS8.4AI score0.00962EPSS
SaveExploits1References2
CVE
CVE
•added 2023/07/07 12:00 a.m.•71 views

CVE-2023-36993

The CVE concerns TravianZ 8.3.4 and 8.3.3 where the password reset function uses a cryptographically insecure random number generator. This root cause permits an attacker to guess password reset parameters and take over accounts. Public sources in connected documents corroborate the same affected...

9.8CVSS9.4AI score0.00962EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2023/07/07 12:00 a.m.•2 views

CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

9.8CVSS0.00962EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/07/07 12:00 a.m.•3 views

PT-2023-25765

Name of the Vulnerable Software and Affected Versions TravianZ versions 8.3.3 through 8.3.4 Description The issue arises from a cryptographically insecure random number generator used in the password reset function, allowing an attacker to guess the password reset parameters and take over account...

9.8CVSS0.00962EPSS
SaveExploits1References6
OSV
OSV
•added 2023/07/07 12:00 a.m.•20 views

CVE-2023-36993

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts...

7.2AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/01 12:00 a.m.•20 views

WordPress Plugin Staff Directory 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS5AI score0.0039EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2023/07/01 12:00 a.m.•16 views

WordPress Plugin Multiple Roles 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS5AI score0.00408EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2023/07/01 12:00 a.m.•16 views

WordPress Plugin Better Search 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

4.3CVSS5AI score0.0039EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2023/07/01 12:00 a.m.•13 views

WordPress Plugin Remove Schema 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS5AI score0.0039EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2023/06/28 12:00 a.m.•16 views

WordPress Plugin Subscribe2 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.2AI score0.00296EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2023/06/28 12:00 a.m.•71 views

SUSE SLES12 Security Update : nodejs16 (SUSE-SU-2023:2655-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2655-1 advisory. Update to version 16.20.1: - CVE-2023-30581: Fixed mainModule.proto Bypass Experimental Policy Mechanism bsc1212574. -...

7.5CVSS6.8AI score0.03906EPSS
SaveExploits1References29
CNNVD
CNNVD
•added 2023/06/13 12:00 a.m.•15 views

WordPress Plugin WP Directory Kit 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

6.1CVSS5AI score0.00337EPSS
SaveExploits1References4
OSV
OSV
•added 2023/06/12 3:30 a.m.•18 views

GHSA-3W3W-PXMM-2W2J crypto-js uses insecure random numbers

The crypto-js package 3.2.0 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary...

5.3CVSS7.1AI score0.01075EPSS
SaveExploits0References10
NVD
NVD
•added 2023/06/12 2:15 a.m.•27 views

CVE-2020-36732

The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary...

5.3CVSS5.7AI score0.01075EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2023/06/12 12:00 a.m.•16 views

CVE-2020-36732

The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary...

7.2AI score0.01075EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/06/09 12:00 a.m.•24 views

WordPress Plugin Quiz And Survey Master 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.1CVSS8AI score0.00791EPSS
SaveExploits4References5
Rows per page
Query Builder