Lucene search
+L

720 matches found

Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•23 views

WordPress Easy Smooth Scroll Links – Smooth Scrolling Anchor plugin <= 2.23.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Easy Smooth Scroll Links – Smooth Scrolling Anchor plugin versions = 2.23.0. Solution Update the WordPress Easy Smooth Scroll Links – Smooth Scrolling Anchor plugin to the latest available version at...

3.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•13 views

WordPress Easy Smooth Scroll Links – Smooth Scrolling Anchor plugin <= 2.23.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Easy Smooth Scroll Links – Smooth Scrolling Anchor plugin versions = 2.23.0. Solution No patched version available...

2.5AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•20 views

WordPress Scrollsequence – Cinematic Scroll Image Animation Plugin plugin < 1.2.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Scrollsequence – Cinematic Scroll Image Animation Plugin plugin versions 1.2.4. Solution Update the WordPress Scrollsequence – Cinematic Scroll Image Animation Plugin plugin to the latest available version at least 1.2.4...

2.3AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•13 views

WordPress Scrollsequence – Cinematic Scroll Image Animation Plugin plugin < 1.2.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Scrollsequence – Cinematic Scroll Image Animation Plugin plugin versions 1.2.4. Solution Update the WordPress Scrollsequence – Cinematic Scroll Image Animation Plugin plugin to the latest available...

3.9AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/16 12:00 a.m.•15 views

The vulnerability of the Scroll component in Google Chrome allows a hacker to gain access to confidential information or cause a service failure.

The vulnerability of the Scroll component in Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

8.8CVSS7AI score0.00873EPSS
SaveExploits0References9Affected Software6
Veracode
Veracode
•added 2022/02/08 10:18 a.m.•38 views

Remote Code Execution (RCE)

Chrome is vulnerable to remote code execution. The vulnerability exists due to an inappropriate implementation in the function scroll...

6.5CVSS7.4AI score0.00873EPSS
SaveExploits0References3Affected Software2
Microsoft CVE
Microsoft CVE
•added 2022/02/02 2:03 a.m.•38 views

Chromium: CVE-2022-0462 Inappropriate implementation in Scroll

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS6.9AI score0.00873EPSS
SaveExploits0
CNVD
CNVD
•added 2021/11/21 12:00 a.m.•30 views

WordPress MouseWheel Smooth Scroll plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress MouseWheel Smooth Scroll plugin in versions...

6.5CVSS6.3AI score0.00549EPSS
SaveExploits2References1
OSV
OSV
•added 2021/11/17 11:15 a.m.•16 views

CVE-2021-24852

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.7AI score0.00549EPSS
SaveExploits2References1
NVD
NVD
•added 2021/11/17 11:15 a.m.•29 views

CVE-2021-24852

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00549EPSS
SaveExploits2References1
CVE
CVE
•added 2021/11/17 10:15 a.m.•60 views

CVE-2021-24852

CVE-2021-24852 affects the WordPress plugin "MouseWheel Smooth Scroll" (versions before 5.7). The root cause is a missing CSRF check on the plugin’s settings page, enabling a CSRF attack to cause a logged-in administrator to change settings. Documented impact is cross-site request forgery leading...

6.5CVSS6.3AI score0.00549EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2021/11/17 10:15 a.m.•30 views

CVE-2021-24852 MouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRF

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.6AI score0.00549EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•2 views

CVE-2021-24852: Cross-Site Request Forgery (CSRF)

The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00549EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/11/17 12:00 a.m.•19 views

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress MouseWheel Smooth Scroll plugin in versions...

6.5CVSS5.5AI score0.00549EPSS
SaveExploits2References2
CNVD
CNVD
•added 2021/10/24 12:00 a.m.•25 views

WordPress Scroll Baner plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Scroll Baner plugin in version 1.0 and...

6.5CVSS1.2AI score0.00572EPSS
SaveExploits2References1
OSV
OSV
•added 2021/10/18 2:15 p.m.•16 views

CVE-2021-24642

The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE via a file upload as well as XSS...

6.5CVSS6.7AI score0.00572EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/10/18 2:15 p.m.•10 views

CVE-2021-24642

The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE via a file upload as well as XSS...

6.5CVSS6.6AI score0.00572EPSS
SaveExploits2References2
CVE
CVE
•added 2021/10/18 1:45 p.m.•65 views

CVE-2021-24642

CVE-2021-24642 affects the Scroll Baner WordPress plugin (versions ≤ 1.0). The root cause is missing CSRF protection and lack of input sanitisation/validation when saving settings, enabling a logged-in admin to alter settings. This could lead to remote code execution (via a file upload) and cross...

6.5CVSS6.2AI score0.00572EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2021/10/18 1:45 p.m.•26 views

CVE-2021-24642 Scroll Baner <= 1.0 - CSRF to RCE

The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE via a file upload as well as XSS...

6.4AI score0.00572EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•12 views

WordPress plugin Scroll Baner 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Scroll Baner plugin in version 1.0 and...

6.5CVSS5.5AI score0.00572EPSS
SaveExploits2References2
Rows per page
Query Builder