Lucene search
+L

3531 matches found

RedhatCVE
RedhatCVE
•added 2025/03/14 3:46 p.m.•21 views

CVE-2025-28856

Cross-Site Request Forgery CSRF vulnerability in dangrossman W3Counter Free Real-Time Web Stats blog-stats-by-w3counter allows Cross Site Request Forgery.This issue affects W3Counter Free Real-Time Web Stats: from n/a through = 4.1...

8.8CVSS7.2AI score0.00191EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/11 9:39 p.m.•18 views

WordPress W3Counter Free Real-Time Web Stats plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin W3Counter Free Real-Time Web Stats versions = 4.1...

8.8CVSS9.1AI score0.00191EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/11 9:15 p.m.•35 views

CVE-2025-28856

Cross-Site Request Forgery CSRF vulnerability in dangrossman W3Counter Free Real-Time Web Stats blog-stats-by-w3counter allows Cross Site Request Forgery.This issue affects W3Counter Free Real-Time Web Stats: from n/a through = 4.1...

8.8CVSS0.00191EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/11 9:15 p.m.•25 views

CVE-2025-28856

Cross-Site Request Forgery CSRF vulnerability in dangrossman W3Counter Free Real-Time Web Stats allows Cross Site Request Forgery. This issue affects W3Counter Free Real-Time Web Stats: from n/a through 4.1...

8.8CVSS5.8AI score0.00191EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 9:00 p.m.•70 views

CVE-2025-28856

CVE-2025-28856 describes a cross-site request forgery (CSRF) in the WordPress plugin W3Counter Free Real-Time Web Stats (affected versions:

8.8CVSS7.2AI score0.00191EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/03/11 9:00 p.m.•37 views

CVE-2025-28856 WordPress W3Counter Free Real-Time Web Stats plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in dangrossman W3Counter Free Real-Time Web Stats blog-stats-by-w3counter allows Cross Site Request Forgery.This issue affects W3Counter Free Real-Time Web Stats: from n/a through = 4.1...

4.3CVSS0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/11 9:00 p.m.•14 views

CVE-2025-28856 WordPress W3Counter Free Real-Time Web Stats plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in dangrossman W3Counter Free Real-Time Web Stats blog-stats-by-w3counter allows Cross Site Request Forgery.This issue affects W3Counter Free Real-Time Web Stats: from n/a through = 4.1...

4.3CVSS8.5AI score0.00191EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•3 views

CVE-2025-28856: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in dangrossman W3Counter Free Real-Time Web Stats blog-stats-by-w3counter allows Cross Site Request Forgery.This issue affects W3Counter Free Real-Time Web Stats: from n/a through = 4.1...

8.8CVSS5.8AI score0.00191EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•16 views

WordPress plugin W3Counter Free Real-Time Web Stats 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS8.7AI score0.00191EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2022-48884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command stats access after free Command may fail while driver is reloading and...

5.5CVSS5.4AI score0.00205EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2022-49353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: don't requests stats with '0' sized stats buffer Sachin reported 1 that on ...

5.5CVSS5.5AI score0.0023EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/03 1:43 p.m.•12 views

MAL-2025-1957 Malicious code in wg-fps-stats (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/03 1:43 p.m.•12 views

Malicious code in wg-fps-stats (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/02/28 11:08 a.m.•15 views

OESA-2025-1199 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

6.5CVSS7.1AI score0.01104EPSS
SaveExploits0References3
OSV
OSV
•added 2025/02/28 11:08 a.m.•13 views

OESA-2025-1200 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

6.5CVSS7.1AI score0.01104EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/28 2:22 a.m.•10 views

SUSE CVE-2024-58015

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix for out-of bound access error Selfgen stats are placed in a buffer using printarraytobufindex function. Array length parameter passed to the function is too big, resulting in possible out-of bound memory error...

5.5CVSS6.7AI score0.0018EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/02/27 3:08 a.m.•7 views

SUSE CVE-2022-49353

In the Linux kernel, the following vulnerability has been resolved: powerpc/paprscm: don't requests stats with '0' sized stats buffer Sachin reported 1 that on a POWER-10 lpar he is seeing a kernel panic being reported with vPMEM when paprscm probe is being called. The panic is of the form below...

5.5CVSS6.7AI score0.0023EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/02/27 3:08 a.m.•15 views

SUSE CVE-2022-49372

In the Linux kernel, the following vulnerability has been resolved: tcp: tcprtxsynack can be called from process context Laurent reported the enclosed report 1 This bug triggers with following coditions: 0 Kernel built with CONFIGDEBUGPREEMPT=y 1 A new passive FastOpen TCP socket is created. This...

5.5CVSS6.2AI score0.00291EPSS
SaveExploits0References4
OSV
OSV
•added 2025/02/27 2:15 a.m.•17 views

UBUNTU-CVE-2025-21712

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmapgetstats with bitmap lifetime After commit ec6bb299c7c3 "md/md-bitmap: add 'syncsize' into struct mdbitmapstats", following panic is reported: Oops: general protection fault, probably for...

7.8CVSS6.1AI score0.00222EPSS
SaveExploits0References29
Debian CVE
Debian CVE
•added 2025/02/27 2:12 a.m.•20 views

CVE-2025-21744

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix NULL pointer dereference in brcmftxfinalize On removal of the device or unloading of the kernel module a potential NULL pointer dereference occurs. The following sequence deletes the interface: brcmfdetach...

5.5CVSS5.6AI score0.00254EPSS
SaveExploits0
Rows per page
Query Builder