Lucene search
+L

2269 matches found

CVE
CVE
•added 2024/05/17 6:53 a.m.•88 views

CVE-2023-41243

The WPvivid Backup and Migration WordPress plugin (versions 0.9.90 and earlier ) is affected by an Improper Privilege Management vulnerability. This flaw allows for Privilege Escalation , where an attacker with Subscriber privileges can potentially gain unauthorized access or control over the sys...

8.8CVSS6.8AI score0.00713EPSS
SaveIn wildExploits0References1Affected Software1
CVE
CVE
•added 2024/05/17 6:52 a.m.•107 views

CVE-2023-38399

CVE-2023-38399 concerns a Local File Inclusion (path traversal) in WordPress plugin Phlox Portfolio by Averta. The vulnerability affects Phlox Portfolio versions up to 2.3.1 and is exploitable without authentication due to improper limitation of a pathname to a restricted directory. Patchstack an...

8.6CVSS6.8AI score0.006EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/17 6:34 a.m.•86 views

CVE-2023-25050

The Shortcodes Ultimate WordPress plugin (versions through 5.12.6 ) is vulnerable to an Absolute Path Traversal vulnerability. This flaw allows an attacker with Contributor privileges to perform an Arbitrary File Download , potentially exposing sensitive data. The root cause is an improper limita...

7.1CVSS6.7AI score0.00591EPSS
SaveIn wildExploits0References1
CVE
CVE
•added 2024/05/17 6:28 a.m.•139 views

CVE-2022-45374

CVE-2022-45374 (YARPP for WordPress) : Local File Inclusion due to improper path handling in YARPP

7.7CVSS6.8AI score0.00843EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/05/17 6:27 a.m.•90 views

CVE-2022-44581

CVE-2022-44581 affects the WordPress Defender Security plugin (WPMU DEV Defender Security) with versions up to 3.3.2. Multiple connected sources describe insecure storage of sensitive information and note that screen temporary files may expose sensitive data. Patchstack frames the issue as Broken...

9.8CVSS6.8AI score0.00679EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/05/16 9:16 a.m.•66 views

CVE-2024-33861

Qt6-base is affected (CVE-2024-33861) due to an invalid pointer passed as a callback in QStringConverter, which could lead to stack modification and bypass of security restrictions. Multiple advisories (e.g., OSV/GLSA) reference fixes in qt6-base; remediation is to upgrade to the patched Qt6-base...

7.5AI score
SaveExploits0References197
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•23 views

The vulnerability of the Linux operating system’s Intel Hardware Feedback Interface driver allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the Intel Hardware Feedback Interface driver in the drivers/thermal/intel/intelhfi.c file of the Linux kernel is related to the improper use of a reserved buffer after resuming from sleep mode. Exploiting this vulnerability could allow an attacker to compromise the integrity...

5.2CVSS6.5AI score0.00236EPSS
SaveExploits0References23Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/05/15 12:00 a.m.•11 views

The vulnerability of the btrfs_get_root_ref() function in the fs/btrfs/disk-io.c file of the Linux kernel’s file system allows a hacker to cause a service failure.

The vulnerability of the btrfsgetrootref function in the fs/btrfs/disk-io.c file of the Linux kernel’s file system is related to the repeated release of a reserved memory block. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00236EPSS
SaveExploits0References30Affected Software2
CVE
CVE
•added 2024/05/14 9:25 p.m.•95 views

CVE-2023-33327

CVE-2023-33327 refers to a high-severity Privilege Escalation in the WordPress Leyka plugin (versions

8.8CVSS6.8AI score0.00521EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2024/05/13 7:00 a.m.•10 views

ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses

...

5.5CVSS6AI score0.0023EPSS
SaveExploits0
CVE
CVE
•added 2024/05/08 8:56 p.m.•1292 views

CVE-2024-27281

A vulnerability exists in RDoc versions 6.3.3 through 6.6.2, distributed in Ruby 3.x through 3.3.0. The root cause is the lack of restrictions on classes being restored when parsing .rdoc_options as a YAML file. This allows for object injection and subsequent remote code execution (RCE) . A simil...

7.1AI score0.01571EPSS
SaveExploits0References5
CVE
CVE
•added 2024/05/08 1:28 p.m.•109 views

CVE-2024-24833

CVE-2024-24833 affects the WordPress plugin Happy Addons for Elementor (Leevio) up to version 3.10.1, caused by broken access control (missing authorization) when cloning posts or adding rows. Patch 3.10.2 fixes the issue. If using this plugin, upgrade to 3.10.2 or later to mitigate the vulnerabi...

8.8CVSS7.2AI score0.00375EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/05/08 11:57 a.m.•96 views

CVE-2022-40218

The CVE-2022-40218 entry concerns the WordPress plugin ThemeHunk Advance Product Search (WordPress TH Advance Product Search Plugin), affecting versions 1.1.4 and earlier. The root cause is a missing authorization check that allows an unauthenticated user to change plugin settings, enabling impac...

9.8CVSS6.8AI score0.00486EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/05/07 10:55 p.m.•5181 views

CVE-2023-27321

CVE-2023-27321 describes a DoS vulnerability in OPC Foundation UA .NET Standard’s OPC UA ConditionRefresh handling. The flaw allows an attacker to trigger a resource exhaustion condition on affected servers by sending a high volume of ConditionRefresh requests, potentially consuming all server re...

7.5CVSS7.5AI score0.01047EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2024/05/07 9:01 p.m.•198 views

CVE-2024-23713

CVE-2024-23713 affects Google's Android Framework, specifically migrateNotificationFilter in NotificationManagerService.java. The root cause is improper input validation that can fail to persist notification settings, enabling local privilege escalation with no extra execution privileges required...

7.8CVSS7AI score0.00083EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/05/07 9:01 p.m.•899 views

CVE-2024-0042

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are listed. Monitor for updates.

7.8CVSS6.7AI score0.00111EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/05/07 9:01 p.m.•162 views

CVE-2024-23712

CVE-2024-23712 affects Android’s AppOpsService.java. It describes a potential DoS by saturating /data/system/appops_accesses.xml due to resource exhaustion. Exploitation is local with no privileges and no user interaction required. Android bulletin context indicates fixes in patch levels 2024-04-...

5.5CVSS6.5AI score0.00085EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/05/07 9:01 p.m.•2967 views

CVE-2024-0022

CVE-2024-0022 affects Android’s CompanionDeviceManagerService.java. The issue is improper input validation that can cause a NotificationAccessConfirmationActivity to be launched for another user profile, enabling local information disclosure without extra privileges and without user interaction. ...

5.5CVSS6.1AI score0.00105EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/05/07 9:01 p.m.•2651 views

CVE-2024-0027

The CVE-2024-0027 issue affects Google Android’s SnoozeHelper.java, where multiple methods can exhaust resources and cause a local boot loop/denial of service. Vulnerability details across connected sources consistently describe a DoS resulting from resource exhaustion with no extra privileges an...

5.5CVSS6.6AI score0.00103EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/05/07 7:11 p.m.•129 views

CVE-2024-23694

CVE-2024-23694 is an Android Bluetooth elevation-of-privilege issue reported in Pixel/Android bulletins. The connected OSV entry details a use-after-free in a paired Bluetooth LE audio device that can enable code execution with no user interaction, on affected Pixel and non-Pixel Android devices....

7.5AI score
SaveExploits0References2
Rows per page
Query Builder