Lucene search
+L

1356 matches found

Vulnrichment
Vulnrichment
•added 2024/03/21 5:41 p.m.•27 views

CVE-2022-47604 WordPress AJAX Thumbnail Rebuild plugin <= 1.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in junkcoder, ristoniinemets AJAX Thumbnail Rebuild.This issue affects AJAX Thumbnail Rebuild: from n/a through 1.13...

4.3CVSS8.6AI score0.00526EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/21 5:41 p.m.•70 views

CVE-2022-47604

CVE-2022-47604 concerns the WordPress plugin AJAX Thumbnail Rebuild (

4.3CVSS8.6AI score0.00526EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•5 views

CVE-2022-47604: Missing Authorization

Missing Authorization vulnerability in junkcoder, ristoniinemets AJAX Thumbnail Rebuild.This issue affects AJAX Thumbnail Rebuild: from n/a through 1.13...

4.3CVSS5.8AI score0.00526EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/21 12:00 a.m.•24 views

PT-2024-11758 · Unknown · Ajax Thumbnail Rebuild

Name of the Vulnerable Software and Affected Versions: AJAX Thumbnail Rebuild versions 1.13 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the AJAX Thumbnail Rebuild software. Recommendations: For versions 1.13 and earlier, updat...

4.3CVSS9.3AI score0.00526EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/20 9:15 p.m.•31 views

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

9.1CVSS7.2AI score0.0081EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/20 12:00 a.m.•23 views

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

7.5AI score0.0081EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/20 12:00 a.m.•139 views

CVE-2024-25294

REBUILD v.3.5 is susceptible to a Server-Side Request Forgery (SSRF) vulnerability. The flaw exists within the FileDownloader.java component, specifically involving the proxyDownload and URL parameters. A remote attacker can exploit this issue to obtain sensitive information and achieve arbitrary...

9.1CVSS7.4AI score0.0081EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•4 views

CVE-2024-25294: Server-Side Request Forgery (SSRF)

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

9.1CVSS6.4AI score0.0081EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/20 12:00 a.m.•23 views

PT-2024-20867

Name of the Vulnerable Software and Affected Versions REBUILD version 3.5 Description The issue allows a remote attacker to obtain sensitive information and execute arbitrary code. This is achieved via the FileDownloader.java and the proxyDownload and URL parameters. Recommendations For REBUILD...

9.1CVSS6.3AI score0.0081EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2024/03/20 12:00 a.m.•39 views

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

7.4AI score0.0081EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/20 12:00 a.m.•15 views

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

9.1CVSS7.7AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•15 views

Rebuild 安全漏洞

Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild v.3.5 that stems from the presence of a Server Request Forgery SSRF vulnerability. The vulnerability can be exploited by an attacker to obtain sensitive information and execute arbitrary code...

9.1CVSS7.3AI score0.0081EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•24 views

openSUSE: Security Advisory for installation (SUSE-SU-2023:2826-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Oracle linux
Oracle linux
•added 2024/03/01 12:00 a.m.•69 views

container-tools:4.0 security update

buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp oci-seccomp-bpf-hook podman 2:4.0.2-26 - rebuild with golang 1.20.12 for CVE-2023-39326 python-podman runc 1:1.1.12-1.0.1 - rebuild with golang 1.20.12 for CVE-2023-3932...

5.3CVSS6.6AI score0.01208EPSS
SaveExploits0
Drupal
Drupal
•added 2024/02/21 12:00 a.m.•32 views

Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010

This module provides an alternative mean of rebuilding the Content Access table. The module doesn't sufficiently reset the state of content access when the module is uninstalled...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/02/21 12:00 a.m.•33 views

PT-2024-10354 · Drupal · Node Access Rebuild Progressive

Name of the Vulnerable Software and Affected Versions: Node Access Rebuild Progressive versions 0.0.0 through 2.0.1 Node Access Rebuild Progressive version prior to 2.0.2 can be simplified to the above range, so it is omitted to avoid duplication. Description: The issue is related to improper...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References5
OSV
OSV
•added 2024/02/19 2:15 a.m.•4 views

DEBIAN-CVE-2020-36774

plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service application crash...

5.5CVSS5.2AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/19 12:00 a.m.•10 views

GNOME Glade Security Vulnerability

GNOME Glade is an interface design tool from the GNOME project. A security vulnerability exists in GNOME Glade, which stems from a denial of service in plugins/gtk+/glade-gtk-box.c that incorrectly handles widget rebuilds for GladeGtkBox...

5.5CVSS6.7AI score0.00214EPSS
SaveExploits0References5
NVD
NVD
•added 2024/01/31 12:16 p.m.•44 views

CVE-2024-1098

A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuCloud.getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to information disclosure. The exploit has been disclosed to the public and may b...

7.5CVSS5.2AI score0.01148EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/31 12:16 p.m.•31 views

CVE-2024-1099

A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS4.2AI score0.00608EPSS
SaveExploits1References3
Rows per page
Query Builder