Lucene search
+L

5844 matches found

Patchstack
Patchstack
•added 2025/01/21 4:31 a.m.•17 views

WordPress Save as PDF Plugin by Pdfcrowd Plugin <= 4.4.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin Save as PDF versions = 4.4.0...

9.8CVSS7.3AI score0.00526EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/16 6:43 p.m.•21 views

WordPress Save & Import Image from URL Plugin <= 0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Save & Import Image from URL versions = 0.7...

7.1CVSS6.1AI score0.0025EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/01/16 6:15 p.m.•43 views

CVE-2024-57770

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/saveoaContractApply.id...

8.8CVSS0.0059EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/16 12:00 a.m.•37 views

CVE-2024-57770

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/saveoaContractApply.id...

0.0059EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•5 views

CVE-2024-57770: Improper Neutralization of Special Elements used in an SQL Command

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/saveoaContractApply.id...

8.8CVSS5.8AI score0.0059EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/16 12:00 a.m.•34 views

CVE-2024-57770

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/saveoaContractApply.id...

8.3AI score0.0059EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/15 1:05 p.m.•33 views

CVE-2024-57891 sched_ext: Fix invalid irq restore in scx_ops_bypass()

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...

0.00179EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/13 10:15 p.m.•12 views

CVE-2023-42230

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...

6.1CVSS5.8AI score0.00283EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/01/13 10:15 p.m.•12 views

CVE-2023-42230

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...

6.1CVSS5.8AI score0.00283EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/13 10:15 p.m.•15 views

CVE-2023-42227

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...

7.5CVSS5.8AI score0.00755EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/13 10:15 p.m.•18 views

CVE-2023-42228

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function...

8.8CVSS5.8AI score0.00446EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•13 views

PT-2025-1456 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to Cross Site Scripting XSS via the WSCView/Save function. This allows for potential malicious script execution. No information is provided about the...

6.1CVSS6.1AI score0.00283EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/01/13 12:00 a.m.•32 views

CVE-2023-42226

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...

0.00755EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/13 12:00 a.m.•12 views

Pat Infinite Solutions HelpdeskAdvanced 安全漏洞

Pat Infinite Solutions HelpdeskAdvanced is an automated solution for strategic governance of Service Management activities from Pat Infinite Solutions. A security vulnerability exists in Pat Infinite Solutions HelpdeskAdvanced version 11.0.33 and prior versions. An attacker can exploit the...

7.5CVSS6.8AI score0.00755EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/13 12:00 a.m.•14 views

Pat Infinite Solutions HelpdeskAdvanced 安全漏洞

Pat Infinite Solutions HelpdeskAdvanced is an automated solution for strategic governance of Service Management activities from Pat Infinite Solutions. A security vulnerability exists in Pat Infinite Solutions HelpdeskAdvanced version 11.0.33 and prior versions. An attacker can exploit the...

6.1CVSS6.1AI score0.00283EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•16 views

PT-2025-1453 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to Directory Traversal via the WSCView/Save function. This allows for potential unauthorized access to sensitive files and directories...

7.5CVSS6.5AI score0.00755EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/13 12:00 a.m.•41 views

CVE-2023-42230

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...

0.00283EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/13 12:00 a.m.•4 views

CVE-2023-42230: Improper Neutralization of Input During Web Page Generation

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...

6.1CVSS5.8AI score0.00283EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/13 12:00 a.m.•4 views

CVE-2023-42227: Improper Limitation of a Pathname to a Restricted Directory

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...

7.5CVSS5.8AI score0.00755EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•21 views

PT-2025-1452 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to Directory Traversal via the Email/SaveAttachment function. This allows unauthorized access to sensitive files and directories. Recommendations: Fo...

7.5CVSS6.4AI score0.00755EPSS
SaveExploits0References5
Rows per page
Query Builder