Lucene search
+L

18277 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2022-49203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix double free during GPU reset on DC streams Why The issue only occurs during the GPU reset code path. We first backup the current state prio...

7.8CVSS6.7AI score0.00234EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2023-52595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: restart beacon queue when hardware reset When a hardware reset is triggered, a...

5.5CVSS5.4AI score0.00174EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2024-35931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Skip do PCI error slot reset during RAS recovery Why: The PCI error slot reset maybe triggered after inject ue to UMC multi times, this caused syste...

7.8CVSS6.4AI score0.00195EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2022-48695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpt3sas: Fix use-after-free warning Fix the following use-after-free warning which is observed during controller reset: refcountt: underflow;...

7.8CVSS6.3AI score0.00241EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/04 4:15 a.m.•41 views

CVE-2024-13686

The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vwstorefrontresetallsettings function in all versions up to, and including, 0.9.9. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS0.00286EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/04 4:15 a.m.•15 views

CVE-2024-13686

The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vwstorefrontresetallsettings function in all versions up to, and including, 0.9.9. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS7.3AI score0.00286EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/04 3:37 a.m.•40 views

CVE-2024-13686 VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vwstorefrontresetallsettings function in all versions up to, and including, 0.9.9. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS0.00286EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/04 3:37 a.m.•11 views

CVE-2024-13686 VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vwstorefrontresetallsettings function in all versions up to, and including, 0.9.9. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS4.4AI score0.00286EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2019-19844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address that is equal to an existing user's emai...

9.8CVSS7AI score0.53561EPSS
SaveExploits7References1
Patchstack
Patchstack
•added 2025/03/03 11:32 p.m.•14 views

WordPress VW Storefront theme <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Reset vulnerability discovered by Peter Thaleikis in WordPress Theme VW Storefront versions = 0.9.9...

4.3CVSS7AI score0.00286EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/03/03 4:15 p.m.•29 views

CVE-2025-27094

Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute...

5.4CVSS0.00365EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/03 3:51 p.m.•31 views

CVE-2025-27094 Tuleap allows default values to be cleared from field configuration

Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute...

5.4CVSS0.00365EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2025/03/03 11:15 a.m.•9 views

CVE-2024-53034

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset...

7.8CVSS5.8AI score0.00117EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•12 views

Tuleap 安全漏洞

Tuleap is an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Tuleap that stems from a malicious user being able to force a reset of field configurations, potentially leading to loss of...

5.4CVSS6.3AI score0.00365EPSS
SaveExploits0References5
Redos
Redos
•added 2025/03/03 12:00 a.m.•15 views

ROS-20250303-01

Vulnerability in Nextcloud cloud storage creation and utilization software Server is related to the lack of restrictions on authentication attempts. Exploitation of the vulnerability could allow an attacker acting remotely to reset arbitrary passwords...

7.1CVSS7.2AI score0.00602EPSS
SaveExploits0
NVD
NVD
•added 2025/02/28 9:15 a.m.•31 views

CVE-2025-1570

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directoristgeneratepasswordresetpincode and resetuserpassword functions...

9.8CVSS0.00444EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/28 8:23 a.m.•10 views

CVE-2025-1570 Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directoristgeneratepasswordresetpincode and resetuserpassword functions...

8.1CVSS5.9AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/02/28 12:00 a.m.•12 views

WordPress plugin Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings 授权问题漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Directorist: AI-Powere...

9.8CVSS8.4AI score0.00444EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/27 3:11 a.m.•15 views

SUSE CVE-2022-49129

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix crash when startup fails. If the nic fails to start, it is possible that the resetwork has already been scheduled. Ensure the work item is canceled so we do not have use-after-free crash in case cleanup is calle...

5.5CVSS6.5AI score0.00268EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/02/27 3:10 a.m.•8 views

SUSE CVE-2022-49186

In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconticlkregistergates This code was using -1 to represent that there was no reset function. Unfortunately, the -1 was stored in u8 so the if clksi.rsid = 0 condition was always true. Th...

7.8CVSS6.8AI score0.00249EPSS
SaveExploits1References3
Rows per page
Query Builder