Lucene search
+L

253 matches found

NVD
NVD
•added 2023/05/22 9:15 a.m.•39 views

CVE-2023-22709

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/05/22 9:15 a.m.•18 views

CVE-2023-22709

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

8.8CVSS7.3AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/22 9:15 a.m.•31 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

6.8CVSS8.7AI score0.00271EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/05/22 8:46 a.m.•64 views

CVE-2023-22709

CVE-2023-22709 is a CSRF vulnerability in the WordPress plugin SRS Simple Hits Counter (versions

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/22 8:46 a.m.•16 views

CVE-2023-22709 WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

4.3CVSS7.1AI score0.00271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/22 12:00 a.m.•8 views

CVE-2023-22709: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 3:51 a.m.•13 views

SUSE CVE-2020-35573

srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service CPU consumption via a long timestamp tag in an SRS address...

7.5CVSS7.2AI score0.02689EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2023/01/19 12:00 a.m.•20 views

WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software SRS Simple Hits Counter Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.1.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-22709 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 429352774cd4 Credits Mika Requir...

8.8CVSS6.7AI score0.00271EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/20 12:00 a.m.•16 views

PT-2022-25150 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: WASM3 version 0.5.0 Description: The issue is related to a segmentation fault in the op Select i32 srs component located in wasm3/source/m3 exec.h. This fault can be triggered, potentially leading to a crash or other unintended behavior. No...

7.5CVSS7.3AI score0.00907EPSS
SaveExploits1References9
NVD
NVD
•added 2022/09/11 9:15 p.m.•32 views

CVE-2022-40324

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...

6.1CVSS0.00443EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/11 9:15 p.m.•28 views

Design/Logic Flaw

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...

5.8CVSS6AI score0.00443EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/09/11 8:11 p.m.•36 views

CVE-2022-40324

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...

6.1AI score0.00443EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/11 12:00 a.m.•9 views

CVE-2022-40324: Improper Neutralization of Input During Web Page Generation

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...

6.1CVSS6.4AI score0.00443EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/13 12:15 p.m.•13 views

CVE-2021-30300

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

7.5CVSS7AI score0.00568EPSS
SaveExploits0References2
NVD
NVD
•added 2022/01/13 12:15 p.m.•44 views

CVE-2021-30300

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

7.5CVSS0.00568EPSS
SaveExploits0References1
Prion
Prion
•added 2022/01/13 12:15 p.m.•33 views

Design/Logic Flaw

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

5CVSS7.5AI score0.00568EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/13 12:00 a.m.•9 views

CVE-2021-30300: Incorrect Type Conversion or Cast

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

7.5CVSS5.8AI score0.00568EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/01/04 12:00 a.m.•22 views

Multiple Qualcomm product code-related vulnerabilities

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and are from time to time fabricated on the surface of semiconductor wafers. A code issue vulnerability exists in Qualcomm products that could...

7.5CVSS7.4AI score0.00568EPSS
SaveExploits0References7
osv_opensuse
osv_opensuse
•added 2021/12/30 3:02 p.m.•17 views

OPENSUSE-SU-2021:1642-1 Security update for postrsd

postrsd was updated to release 1.11 boo1180251: Drop group privileges as well as user privileges Fixed: The subprocess that talks to Postfix could be caused to hang with a very long email address. CVE-2020-35573 - Update to release 1.6 Fix endianness issue with SHA-1 implementation Add dual stack...

7.5CVSS7.5AI score0.02689EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2021/12/30 12:00 a.m.•45 views

Security update for postrsd (moderate)

openSUSE Security Update: Security update for postrsd Announcement ID: openSUSE-SU-2021:1642-1 Rating: moderate References: 1180251 Cross-References: CVE-2020-35573 CVSS scores: CVE-2020-35573 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 ...

7.5CVSS7.5AI score0.02689EPSS
SaveExploits0References1
Rows per page
Query Builder