Lucene search
+L

13870 matches found

CNNVD
CNNVD
added 2024/12/13 12:0 a.m.9 views

WordPress plugin Donations Made Easy – Smart Donations 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the WordPre...

8.8CVSS8.4AI score0.00596EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/12 6:15 a.m.20 views

CVE-2024-11781

The Smart Agenda – Prise de rendez-vous en ligne plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'smartagenda' shortcode in all versions up to, and including, 4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS0.00288EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/12 5:24 a.m.9 views

CVE-2024-11781 Smart Agenda – Prise de rendez-vous en ligne <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Smart Agenda – Prise de rendez-vous en ligne plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'smartagenda' shortcode in all versions up to, and including, 4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS5.8AI score0.00288EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/12 5:24 a.m.56 views

CVE-2024-11781

CVE-2024-11781 affects the WordPress plugin Smart Agenda – Prise de rendez-vous en ligne (versions up to 4.6). It enables authenticated attackers with contributor+ rights to trigger a Stored Cross-Site Scripting via the plugin’s smartagenda shortcode attributes due to insufficient input sanitizat...

6.4CVSS5.7AI score0.00288EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/12 5:24 a.m.21 views

CVE-2024-11781 Smart Agenda – Prise de rendez-vous en ligne <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Smart Agenda – Prise de rendez-vous en ligne plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'smartagenda' shortcode in all versions up to, and including, 4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS0.00288EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.6 views

WordPress plugin Smart Agenda 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...

6.4CVSS7.8AI score0.00288EPSS
SaveExploits0References2
Amazon
Amazon
added 2024/12/12 12:0 a.m.8 views

Low: opensc

Issue Overview: It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. CVE-2024-45615 It is caused by th...

4.3CVSS7.2AI score0.00355EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:0 a.m.7 views

The vulnerability of the PKCS15-init personalization utility in the software and library set for working with smart cards in OpenSC allows a violator to gain unauthorized access to protected information.

The vulnerability of the pkcs15-init personalization utility for smart cards, a software tool and library for working with smart cards in OpenSC, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...

4.6CVSS6.9AI score0.00293EPSS
SaveExploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:0 a.m.8 views

The vulnerability of the openpgpGenerateKeyRsa() function in the personalization utility for smart cards PKCS15-INIT is a flaw in the software and library tools used to work with OpenSC smart cards. This vulnerability allows a perpetrator to circumvent security restrictions and execute arbitrary code.

The vulnerability of the openpgpGenerateKeyRsa function in the personalization utility for smart cards, part of the software and library suite for working with OpenSC smart cards, stems from an operation that occurs outside the buffer in memory during key generation. Exploiting this vulnerability...

2.9CVSS7AI score0.0031EPSS
SaveExploits0References14Affected Software5
Amazon
Amazon
added 2024/12/12 12:0 a.m.15 views

Low: opensc

Issue Overview: It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially crafted response to APDUs in a USB device or a smart card. CVE-2024-45615 It is caused by th...

4.3CVSS7.3AI score0.00355EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:0 a.m.15 views

Oracle Siebel Server (July 2022 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the July 2022 CPU advisory. - Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM component: Smart Answer Apache PDFBox. Supported versions that are affected a...

5.5CVSS6.6AI score0.03054EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:0 a.m.19 views

Amazon Linux 2023 : opensc (ALAS2023-2024-775)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-775 advisory. It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be accessed incorrectly when a specially...

4.3CVSS6AI score0.00355EPSS
SaveExploits0References16
NVD
NVD
added 2024/12/09 1:15 p.m.19 views

CVE-2023-49856

Missing Authorization vulnerability in EDGARROJAS Smart Forms smart-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through = 2.6.84...

8.8CVSS0.00522EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.4 views

CVE-2023-49856

Missing Authorization vulnerability in RedNao Smart Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through 2.6.84...

8.8CVSS5.8AI score0.00522EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.18 views

CVE-2023-30783

Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through 2.5.0...

4.3CVSS0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.5 views

CVE-2023-30783 WordPress Smart WooCommerce Search plugin <= 2.5.0 - Broken Access Control

Missing Authorization vulnerability in YummyWP Smart WooCommerce Search smart-woocommerce-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through = 2.5.0...

4.3CVSS6.9AI score0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:31 a.m.42 views

CVE-2023-30783

CVE-2023-30783 affects the Smart WooCommerce Search plugin for WordPress (

4.3CVSS8.6AI score0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.16 views

CVE-2023-49856 WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability

Missing Authorization vulnerability in EDGARROJAS Smart Forms smart-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through = 2.6.84...

8.1CVSS8.5AI score0.00522EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 11:30 a.m.22 views

CVE-2023-49856 WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability

Missing Authorization vulnerability in EDGARROJAS Smart Forms smart-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through = 2.6.84...

8.1CVSS0.00522EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.8 views

WordPress plugin Smart Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS8.7AI score0.00522EPSS
SaveExploits0References1
Rows per page
Query Builder