Lucene search
+L

94 matches found

CNNVD
CNNVD
•added 2022/12/05 12:00 a.m.•11 views

FUJISOFT +F FS040U 跨站请求伪造漏洞

FUJISOFT +F FS040U is a LTE USB converter from FUJISOFT Japan. A security vulnerability exists in FUJISOFT +F FS040U v2.3.4 and earlier, +F FS020W v4.0.0 and earlier, +F FS030W v3.3.5 and earlier, +F FS040W v4.1 and earlier, that originates from a vulnerability that could allow a nearby attacker ...

7.3CVSS6AI score0.00231EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2022/06/27 9:15 a.m.•12 views

CVE-2022-0444

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key...

4.3CVSS5.5AI score0.00294EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/06 12:00 a.m.•8 views

CVE-2022-1570: Cross-Site Request Forgery (CSRF)

The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action...

6.5CVSS6.7AI score0.00422EPSS
SaveExploits2References3
OSV
OSV
•added 2022/03/21 10:15 p.m.•12 views

CVE-2022-27333

idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data...

7.5CVSS7.1AI score0.00796EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/21 10:15 p.m.•11 views

CVE-2022-27333

idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data...

7.5CVSS5.9AI score0.00796EPSS
SaveExploits1References2
OSV
OSV
•added 2022/03/10 5:46 p.m.•20 views

CVE-2022-24930

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper permission...

3.3CVSS5.8AI score0.00429EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/03/07 12:00 a.m.•20 views

WordPress plugin WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin. WordPress plugin WordPress Real Cookie Banner: GDPR DSGVO ...

6.5CVSS6.3AI score0.00531EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2022/02/01 1:15 p.m.•6 views

CVE-2021-25092

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack...

6.5CVSS6.7AI score0.0048EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/14 12:15 p.m.•15 views

CVE-2021-24282

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the various AJAX actions in the plugin to do a variety of things. For example, an attacker could use wpcf7rresetsettings to reset the plugin’s settings, wpcf7raddaction to...

6.3CVSS5.8AI score0.00728EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/05/14 12:15 p.m.•12 views

CVE-2021-24282

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the various AJAX actions in the plugin to do a variety of things. For example, an attacker could use wpcf7rresetsettings to reset the plugin’s settings, wpcf7raddaction to...

6.5CVSS6.5AI score0.00728EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2021/05/14 12:00 a.m.•16 views

WordPress plugin 安全漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An improper access control vulnerability exists in WordPress Redirection for Contact Form 7 Plugin...

6.5CVSS5.8AI score0.00728EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/05/14 12:00 a.m.•3 views

PT-2021-15822

Name of the Vulnerable Software and Affected Versions Redirection for Contact Form 7 versions prior to 2.3.4 Description The issue allows any authenticated user, such as a subscriber, to utilize various AJAX actions within the plugin. This enables an attacker to perform several actions, for...

6.5CVSS0.00728EPSS
SaveExploits1References5
CNVD
CNVD
•added 2019/08/20 12:00 a.m.•26 views

WordPress Rank Math SEO Plugin Code Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Rank Math SEO is a search engine optimization SEO plugin used in... A code injection vulnerability exists in the...

6.5CVSS7.4AI score0.01381EPSS
SaveExploits2References1
The Hacker News
The Hacker News
•added 2013/11/02 4:50 a.m.•28 views

Google Chrome adds automatic malware blocking for suspicious downloads

Today Malware is a very real threat, and if you’re not careful about what you download and install, you could end up with a serious problem. But now Google will be trying their very best to block malware from installing itself on your computer on your behalf. Google has developed a security featu...

6.6AI score
SaveExploits0
Rows per page
Query Builder