Lucene search
+L

82 matches found

RedhatCVE
RedhatCVE
added 2025/03/28 5:47 p.m.11 views

CVE-2025-28873

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.This issue affects Shuffle: from n/a through = 0.5...

8.5CVSS7.3AI score0.0052EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.10 views

CVE-2025-30784

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows SQL Injection.This issue affects WP Subscription Forms: from n/a through = 1.2.3...

8.5CVSS0.00433EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.7 views

CVE-2025-30785

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.This issue affects Subscribe to Download Lite: from n/a through = 1.2.9...

7.5CVSS0.00965EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/27 10:54 a.m.44 views

CVE-2025-30785

CVE-2025-30785 corresponds to a local file inclusion in the WordPress plugin Subscribe to Download Lite. The weakness arises from improper control of filename in an include/require statement (PHP). The vulnerable condition is authenticated access (Contributor+) and is tied to the Subscribe to Dow...

7.5CVSS7.2AI score0.00965EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/27 10:54 a.m.48 views

CVE-2025-30784

CVE-2025-30784 is an SQL Injection vulnerability in the WP Subscription Forms plugin for WordPress (affected versions

8.5CVSS7.3AI score0.00433EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/26 3:16 p.m.10 views

CVE-2025-28873

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.This issue affects Shuffle: from n/a through = 0.5...

8.5CVSS0.0052EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/26 2:24 p.m.8 views

CVE-2025-28873 WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.This issue affects Shuffle: from n/a through = 0.5...

8.5CVSS7.3AI score0.0052EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/26 2:24 p.m.21 views

CVE-2025-28873 WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Scott Taylor Shuffle shuffle allows Blind SQL Injection.This issue affects Shuffle: from n/a through = 0.5...

8.5CVSS0.0052EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/26 2:24 p.m.63 views

CVE-2025-28873

CVE-2025-28873 describes an SQL injection vulnerability in the WordPress Shuffle plugin that allows an authenticated (Subscriber) attacker to perform blind SQL injection. The issue is triggered via improper neutralization of input in SQL commands, leading to potential data exposure and high impac...

8.5CVSS7.3AI score0.0052EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/26 12:0 a.m.13 views

WordPress plugin Shuffle SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress Shuffle plugin suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements. An attacker can exploit this...

8.5CVSS7.8AI score0.0052EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:29 p.m.8 views

WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Theme Shuffle versions = 0.5...

8.5CVSS8.1AI score0.0052EPSS
SaveExploits0Affected Software1
Microsoft CVE
Microsoft CVE
added 2024/06/30 2:0 p.m.9 views

TensorFlow has Null Pointer Error in RandomShuffle with XLA enable

...

7.5CVSS6.3AI score0.00391EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:51 p.m.8 views

Malicious code in game-shuffle_cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/11/14 7:45 p.m.34 views

Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities

Summary IBM Security Guardium has addressed these vulnerabilities in an update. Vulnerability Details CVEID: CVE-2022-46363 DESCRIPTION: Apache CXF could allow a remote attacker to obtain sensitive information, caused by a flaw when the CXFServlet is configured with both the static-resources-list...

7.5CVSS8.5AI score0.20459EPSS
SaveExploits6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/10/09 10:38 a.m.27 views

Security Bulletin: Vulnerability in snappy-java affects IBM Process Mining . CVE-2023-34453

Summary There is a vulnerability in snappy-java that could allow a remote attacker to execute a denial of service. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2023-34453 DESCRIPTION:...

7.5CVSS7AI score0.01707EPSS
SaveExploits1Affected Software1
RedHat Linux
RedHat Linux
added 2023/09/14 9:51 a.m.16 views

snappy-java: Integer overflow in compress leads to DoS

A flaw was found in Snappy-java's shuffle function, which does not check input sizes before beginning operations. This issue could allow an attacker to send malicious input to trigger an overflow error that crashes the program, resulting in a denial of service...

7.5CVSS7.3AI score0.01469EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/09/14 9:51 a.m.13 views

snappy-java: Integer overflow in shuffle leads to DoS

A flaw was found in Snappy-java's shuffle function, which does not check input sizes before beginning operations. This issue could allow an attacker to send malicious input to trigger an overflow error that crashes the program, resulting in a denial of service...

7.5CVSS7.3AI score0.01707EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:0 a.m.12 views

The vulnerability of the shuffle function in the snappy-java fast compression/decompression library allows a hacker to induce a service failure.

The vulnerability of the shuffleint input function in the snappy-java compression/decompression library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.9AI score0.01707EPSS
SaveExploits1References7Affected Software3
RedhatCVE
RedhatCVE
added 2023/08/08 5:21 p.m.67 views

CVE-2023-34454

A flaw was found in Snappy-java's shuffle function, which does not check input sizes before beginning operations. This issue could allow an attacker to send malicious input to trigger an overflow error that crashes the program, resulting in a denial of service...

5.9CVSS6.9AI score0.01469EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/15 5:15 p.m.17 views

CVE-2023-34453

snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing a fatal error. The function shuffleint input in the file BitShuffle.java receives an array of integers and applies a bit shuffle on it. It...

7.5CVSS6.7AI score0.01707EPSS
SaveExploits1References4
Rows per page
Query Builder