Lucene search
K

13 matches found

CNNVD
CNNVD
added 2025/09/11 12:0 a.m.1 views

WordPress plugin Catalog Importer Scraper Crawler 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

8.1CVSS7.3AI score0.00336EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/02/21 12:0 a.m.1 views

WordPress plugin WPUpper Share Buttons 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

4.3CVSS8.7AI score0.00059EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.1 views

WordPress plugin Christmasify! 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.1CVSS6.5AI score0.00168EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/22 12:0 a.m.1 views

WordPress plugin NextScripts Social Networks Auto-Poster 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site...

5.4CVSS6.3AI score0.00121EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/05 12:0 a.m.2 views

WordPress plugin Depicter Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS6.6AI score0.00078EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.4 views

WordPress plugin Debug Log Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.00125EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/05/20 12:0 a.m.2 views

WordPress Plugin Groundhogg 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS6.5AI score0.00093EPSS
Exploits0References4
CNVD
CNVD
added 2018/03/19 12:0 a.m.1 views

AppWeb Authentication Bypass Vulnerability

AppWeb is Embedthis Software LLC is responsible for the development and maintenance of a GPL-based open source embedded Web Server , it is written in C/C++ , can run on almost all popular operating systems . An authentication bypass vulnerability exists in AppWeb. The vulnerability is due to a...

7.1AI score
Exploits0References1
Debian CVE
Debian CVE
added 2014/10/27 8:0 p.m.18 views

CVE-2010-5077

server/svmain.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service network traffic amplification via a spoofed 1 getstatus or 2 rcon request...

7.8CVSS6.4AI score0.02066EPSS
Exploits0
The Hacker News
The Hacker News
added 2013/10/11 4:31 a.m.21 views

Metasploit website Hacked just by sending a spoofed DNS change request via Fax to Domain Registrar

A group of Pro-Palestine hackers 'KDMS Team' today has been able to hijack the Metasploit website simply by sending a fax and hijacked their DNS records. Rapid7 is a leading Security Company and Creator of world's best penetration testing software called 'Metasploit'. The company confirmed via...

6.7AI score
Exploits0
FreeBSD
FreeBSD
added 2010/11/29 12:0 a.m.37 views

phpMyAdmin -- XSS attack in database search

phpMyAdmin team reports: It was possible to conduct a XSS attack using spoofed request on the db search script...

4.3CVSS5.9AI score0.0072EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2009/01/22 12:0 a.m.2512 views

DNS Server Spoofed Request Amplification DDoS

The remote DNS server answers to any request. It is possible to query the name servers NS of the root zone '.' and get an answer that is bigger than the original request. By spoofing the source IP address, a remote attacker can leverage this 'amplification' to launch a denial of service attack...

5CVSS8.2AI score0.30712EPSS
Exploits2References2
NVD
NVD
added 2000/01/12 5:0 a.m.10 views

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

7.2CVSS6.5AI score0.02069EPSS
Exploits1References5
Rows per page
Query Builder