Lucene search
+L

7038 matches found

Patchstack
Patchstack
added 2024/01/31 12:00 a.m.8 views

WordPress Relevanssi Plugin < 4.22 is vulnerable to Sensitive Data Exposure

Software Relevanssi Type Plugin Vulnerable versions 4.22 Fixed in 4.22 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5f9eb9b2e9af Credits N/A Required privilege Unauthenticated Publishe...

6.9AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/01/31 12:00 a.m.21 views

WordPress WP STAGING – Backup Duplicator & Migration Plugin < 3.2.0 is vulnerable to Sensitive Data Exposure

Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions 3.2.0 Fixed in 3.2.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7204 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 32da6e6cd071 Credits...

7.5CVSS6.5AI score0.00644EPSS
SaveExploits2References4Affected Software1
Patchstack
Patchstack
added 2024/01/31 12:00 a.m.7 views

WordPress Relevanssi Premium Plugin < 2.25 is vulnerable to Sensitive Data Exposure

Software Relevanssi Premium Type Plugin Vulnerable versions 2.25 Fixed in 2.25 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 420edf018e9b Credits N/A Required privilege Unauthenticated...

6.9AI score
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/01/29 5:15 p.m.5 views

DEBIAN-CVE-2023-40550

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase...

5.5CVSS6.8AI score0.00397EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/29 5:15 p.m.32 views

Design/Logic Flaw

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase...

3.2CVSS6.7AI score0.00397EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2024/01/29 4:29 p.m.219 views

CVE-2023-40550

CVE-2023-40550 affects Shim/shim in boot path; root cause is an out-of-bounds read during SBAT validation, potentially exposing sensitive data during system boot. Related IBM/DS8K/HMC advisories describe multiple Shim CVEs consolidated under Power HMC, including fixes in microcode bundles (DS8900...

5.5CVSS6.2AI score0.00397EPSS
SaveExploits0References12Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/29 4:29 p.m.8 views

CVE-2023-40550 Shim: out-of-bound read in verify_buffer_sbat()

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase...

5.5CVSS6.8AI score0.00397EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2024/01/29 2:44 p.m.46 views

CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure

The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...

7.7AI score0.00644EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/01/29 2:44 p.m.19 views

CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure

The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...

6.8AI score0.00644EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/01/26 11:19 p.m.23 views

CVE-2024-23506 WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.9...

7.7CVSS6.9AI score0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/26 11:19 p.m.35 views

CVE-2024-23506 WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.9...

7.7CVSS7.7AI score0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/26 11:07 p.m.46 views

CVE-2023-52187 WordPress Image Source Control Plugin <= 2.17.0 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Thomas Maier Image Source Control Lite – Show Image Credits and Captions.This issue affects Image Source Control Lite – Show Image Credits and Captions: from n/a through 2.17.0...

5.3CVSS7.7AI score0.00481EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/26 11:07 p.m.3 views

CVE-2023-52187 WordPress Image Source Control Plugin <= 2.17.0 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Thomas Maier Image Source Control Lite – Show Image Credits and Captions.This issue affects Image Source Control Lite – Show Image Credits and Captions: from n/a through 2.17.0...

5.3CVSS7.8AI score0.00481EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/26 12:00 a.m.12 views

PT-2024-19908 · Unknown · Instawp Connect

Name of the Vulnerable Software and Affected Versions: InstaWP Connect – 1-click WP Staging & Migration versions 0.1.0.9 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to...

7.7CVSS6.7AI score0.00504EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/01/24 2:50 p.m.41 views

CVE-2024-22141 WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0...

6.5CVSS7.7AI score0.00492EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/24 12:15 p.m.12 views

CVE-2024-22301

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ignazio Scimone Albo Pretorio On line.This issue affects Albo Pretorio On line: from n/a through 4.6.6...

7.5CVSS7.3AI score0.00429EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/24 12:15 p.m.12 views

CVE-2024-22294

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3...

7.5CVSS7.3AI score0.00453EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/24 12:09 p.m.44 views

CVE-2024-22154 WordPress SalesKing Plugin <= 1.6.15 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SNP Digital SalesKing.This issue affects SalesKing: from n/a through 1.6.15...

7.5CVSS7.7AI score0.0052EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/24 12:05 p.m.34 views

CVE-2024-22294 WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3...

5.3CVSS7.7AI score0.00453EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/24 12:05 p.m.22 views

CVE-2024-22294 WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3...

5.3CVSS6.8AI score0.00453EPSS
SaveExploits0References1
Rows per page
Query Builder