Lucene search
+L

4009 matches found

Vulnrichment
Vulnrichment
added 2025/01/09 3:39 p.m.7 views

CVE-2025-22537 WordPress Google Maps Travel Route Plugin <= 1.3.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in traveller11 Google Maps Travel Route allows SQL Injection.This issue affects Google Maps Travel Route: from n/a through 1.3.1...

8.5CVSS8.8AI score0.00368EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/09 3:39 p.m.54 views

CVE-2025-22537

CVE-2025-22537 is an active vulnerability affecting Google Maps Travel Route. Affected component: traveller11 Google Maps Travel Route. Description (validated by Red Hat and Wordfence sources): Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) in the travel route ...

8.5CVSS7.3AI score0.00368EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.4 views

WordPress plugin Google Maps Travel Route SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Google Map...

8.5CVSS8.9AI score0.00368EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/01/08 12:21 a.m.4 views

SUSE CVE-2024-55553

In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...

5.3CVSS7.1AI score0.00837EPSS
SaveExploits0References7
NVD
NVD
added 2025/01/07 5:15 p.m.24 views

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...

8.8CVSS0.06611EPSS
SaveExploits5References2
Patchstack
Patchstack
added 2025/01/07 12:55 p.m.6 views

WordPress Google Maps Travel Route Plugin <= 1.3.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Google Maps Travel Route versions = 1.3.1...

8.5CVSS8.1AI score0.00368EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2025/01/07 3:49 a.m.3 views

SUSE CVE-2024-56646

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in modifyprefixroute syzbot found a NULL deref 1 in modifyprefixroute, caused by one fib6info without a fib6table pointer set. This can happen for net-ipv6.fib6nullentry 1 Oops: general protection...

5.5CVSS7.7AI score0.00213EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/01/07 12:0 a.m.21 views

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...

8AI score0.06611EPSS
SaveExploits5References2
Cvelist
Cvelist
added 2025/01/07 12:0 a.m.26 views

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...

0.06611EPSS
SaveExploits5References2
OSV
OSV
added 2025/01/07 12:0 a.m.27 views

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...

8.8CVSS7.9AI score0.06611EPSS
SaveExploits5References4
OSV
OSV
added 2025/01/06 11:15 p.m.7 views

AZL-55066 CVE-2024-55553 affecting package frr for versions less than 9.1.1-3

In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...

7.5CVSS7.5AI score0.00837EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/06 11:15 p.m.1 views

DEBIAN-CVE-2024-55553

In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...

7.5CVSS8AI score0.00837EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/06 11:15 p.m.8 views

AZL-55115 CVE-2024-55553 affecting package frr for versions less than 8.5.5-3

In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...

7.5CVSS7.5AI score0.00837EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/06 11:15 p.m.22 views

UBUNTU-CVE-2024-55553

In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...

7.5CVSS7.4AI score0.00837EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/06 12:0 a.m.5 views

PT-2025-1316

Name of the Vulnerable Software and Affected Versions FRRouting versions 6.0 through 10.2.1 FRRouting versions prior to 10.3 Description The issue is related to the re-validation of routes in FRRouting. An attacker can trigger re-parsing of the RIB for FRR routers using RTR by causing more than t...

9.8CVSS8.1AI score0.00837EPSS
SaveExploits0References36
OSV
OSV
added 2025/01/06 12:0 a.m.13 views

CVE-2024-55553

In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...

7.5CVSS7.6AI score0.00837EPSS
SaveExploits0References5
Snyk
Snyk
added 2025/01/01 6:32 a.m.2 views

Improper Access Control

Overview gpt-researcher is a GPT Researcher is an autonomous agent designed for comprehensive web research on any task Affected versions of this package are vulnerable to Improper Access Control when the routes 'getConfig' and 'setConfig' were accessible. Remediation Upgrade gpt-researcher to...

6.9CVSS6.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.20 views

PT-2026-5515

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to DMA engine functionality, specifically within the dw dmamux component. The issue involves a potential Open Firmware OF node leak during route...

5.5CVSS6.5AI score0.00183EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.5 views

PT-2026-5512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device leak exists in the dmaengine subsystem, specifically within the stm32 dmamux component, during route allocation. The issue stems from failing to release a reference to the DMA m...

5.5CVSS6.7AI score0.00187EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.4 views

PT-2026-5511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device leak exists in the dma-crossbar driver on the am335x platform during route allocation. The issue occurs because a reference to the crossbar platform device is not dropped when...

5.5CVSS6.5AI score0.00187EPSS
SaveExploits0
Rows per page
Query Builder