Lucene search
+L

1450 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•1 views

CVE-2023-46639: Missing Authorization

Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.5...

5.3CVSS5.9AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•12 views

PT-2025-1527 · Unknown · Feedbackwp Kk Star Ratings

Name of the Vulnerable Software and Affected Versions: FeedbackWP kk Star Ratings versions through 5.4.5 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through...

5.3CVSS9.4AI score0.0035EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/21 6:15 a.m.•27 views

CVE-2024-11977

The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10. This is due to the software allowing users to execute an action that does not properly validate a value before running...

7.3CVSS0.00632EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/21 5:31 a.m.•45 views

CVE-2024-11977 kk Star Ratings – Rate Post & Collect User Feedbacks <= 5.4.10 - Unauthenticated Arbitrary Shortcode Execution

The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10. This is due to the software allowing users to execute an action that does not properly validate a value before running...

7.3CVSS0.00632EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/21 5:31 a.m.•78 views

CVE-2024-11977

CVE-2024-11977 concerns the kk Star Ratings – Rate Post & Collect User Feedbacks WordPress plugin. The WordPress plugin is vulnerable to arbitrary shortcode execution in all versions up to and including 5.4.10 due to unvalidated input passed to do_shortcode, enabling unauthenticated attackers to ...

7.3CVSS7.6AI score0.00632EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/12/21 12:00 a.m.•11 views

PT-2024-17378 · WordPress · Kk Star Ratings

Name of the Vulnerable Software and Affected Versions: The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress versions up to, and including, 5.4.10 Description: The issue is related to arbitrary shortcode execution due to the software allowing users to execute an action...

7.3CVSS9.7AI score0.00632EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/21 12:00 a.m.•1 views

CVE-2024-11977: Improper Control of Generation of Code

The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10. This is due to the software allowing users to execute an action that does not properly validate a value before running...

7.3CVSS6.3AI score0.00632EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/21 12:00 a.m.•10 views

WordPress plugin The kk Star Ratings 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in the WordPress...

7.3CVSS8.6AI score0.00632EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/12/20 8:19 p.m.•10 views

WordPress kk Star Ratings plugin <= 5.4.10 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Plugin kk Star Ratings versions = 5.4.10...

7.3CVSS7.1AI score0.00632EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/12/13 3:15 p.m.•15 views

CVE-2023-36528

Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.3...

5.3CVSS0.00559EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/12/13 3:15 p.m.•12 views

CVE-2023-36528

Missing Authorization vulnerability in properfraction kk Star Ratings kk-star-ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through = 5.4.3...

5.3CVSS5.8AI score0.00559EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/13 2:23 p.m.•52 views

CVE-2023-36528

CVE-2023-36528 relates to the WordPress plugin KK Star Ratings (versions ≤ 5.4.3). The vulnerability is described as a Missing Authorization issue that enables rate manipulation due to incorrectly configured access control. Public sources in the connected documents confirm affected software and t...

5.3CVSS8AI score0.00559EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•1 views

CVE-2024-12309: Authorization Bypass Through User-Controlled Key

The Rate My Post – Star Rating Plugin by FeedbackWP plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.4 via the getpoststatus due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to...

5.3CVSS5.7AI score0.00317EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•12 views

PT-2024-12570 · Unknown · Kk Star Ratings

Name of the Vulnerable Software and Affected Versions: KK Star Ratings versions 5.4.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in the KK Star Ratings plugin, allowing rate manipulation via IP spoofing. This vulnerability exploits incorrectly configure...

5.3CVSS8.7AI score0.00559EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•1 views

CVE-2023-36528: Missing Authorization

Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.3...

5.3CVSS5.9AI score0.00559EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/06 10:15 p.m.•12 views

CVE-2024-44852

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetastar::ThetaStar::isUnsafeToPlan...

9.8CVSS5.8AI score0.00604EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/12/06 12:00 a.m.•10 views

PT-2024-31281 · Open Robotics · Ros2

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 navigation2 version humble Description: A segmentation violation was discovered in the component theta star::ThetaStar::isUnsafeToPlan. This issue affects the navigation2 package in ROS2...

9.8CVSS7.2AI score0.00604EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•11 views

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from the component thetastar::ThetaStar::isUnsafeToPlan containing a segmentation violation...

9.8CVSS6.8AI score0.00604EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2024/11/26 1:03 p.m.•502 views

Exploit for Deserialization of Untrusted Data in Alibaba Fastjson

CVE-2022-25845-In-Spring !Languagehttps://img.shields.io/b...

9.8CVSS7.4AI score0.18743EPSS
SaveExploits6
NVD
NVD
•added 2024/11/18 9:15 p.m.•33 views

CVE-2024-50804

Insecure Permissions vulnerability in Micro-star International MSI Center Pro 2.1.37.0 allows a local attacker to execute arbitrary code via the DeviceDeviceID.dat.bak file within the C:\ProgramData\MSI\One Dragon Center\Data folder...

7.8CVSS0.00629EPSS
SaveExploits0References1
Rows per page
Query Builder