Lucene search
+L

13967 matches found

WPVulnDB
WPVulnDB
added 2023/11/24 12:00 a.m.9 views

Table of Contents Plus < 2309 - Authenticated (Administrator+) Stored Cross-Site Scripting

Description The Table of Contents Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2302 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

5.9AI score
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2023/11/23 10:43 a.m.22 views

Information Disclosure

codeigniter4/shield is vulnerable to Information Disclosure. The vulnerability is due to improper masking of sensitive information in to the log table. An attacker can gain access to sensitive tokens if they can access the application logs...

6.5CVSS6.8AI score0.0063EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
added 2023/11/23 12:00 a.m.13 views

WordPress League Table Plugin <= 1.13 is vulnerable to Cross Site Request Forgery (CSRF)

Software League Table Type Plugin Vulnerable versions = 1.13 Fixed in 1.14 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48334 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 11fbeec1c358 Credits Nguyen Xuan Chien Requir...

8.8CVSS7AI score0.00269EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/22 2:15 p.m.9 views

CVE-2023-26535

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

8.8CVSS7.3AI score0.003EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/22 2:15 p.m.31 views

CVE-2023-26535

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

8.8CVSS0.003EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/22 2:05 p.m.49 views

CVE-2023-26535

CVE-2023-26535: Cross-Site Request Forgery in WordPress Sheets To WP Table Live Sync plugin (

8.8CVSS7.1AI score0.003EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/22 2:05 p.m.11 views

CVE-2023-26535 WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

5.4CVSS7.4AI score0.003EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/22 12:00 a.m.6 views

WordPress Plugin Sheets To WP Table Live Sync Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS7.9AI score0.003EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/11/22 12:00 a.m.11 views

WooCommerce Product Table Lite < 3.1.0 - CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.8CVSS7AI score0.00294EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2023/11/20 12:00 a.m.10 views

Xen Security Vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that stems...

5.5CVSS6.5AI score0.00284EPSS
SaveExploits0References6
NVD
NVD
added 2023/11/18 10:15 p.m.13 views

CVE-2023-47519

Cross-Site Request Forgery CSRF vulnerability in WC Product Table WooCommerce Product Table Lite.This issue affects WooCommerce Product Table Lite: from n/a through 2.6.2...

8.8CVSS0.00294EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/18 10:15 p.m.8 views

CVE-2023-47519

Cross-Site Request Forgery CSRF vulnerability in WC Product Table WooCommerce Product Table Lite.This issue affects WooCommerce Product Table Lite: from n/a through 2.6.2...

8.8CVSS7.3AI score0.00294EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/18 10:15 p.m.16 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WC Product Table WooCommerce Product Table Lite.This issue affects WooCommerce Product Table Lite: from n/a through 2.6.2...

6.8CVSS7.2AI score0.00294EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/18 10:01 p.m.18 views

CVE-2023-47519 WordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WC Product Table WooCommerce Product Table Lite.This issue affects WooCommerce Product Table Lite: from n/a through 2.6.2...

4.3CVSS7.2AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/18 10:01 p.m.32 views

CVE-2023-47519 WordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WC Product Table WooCommerce Product Table Lite.This issue affects WooCommerce Product Table Lite: from n/a through 2.6.2...

4.3CVSS8.9AI score0.00294EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/18 10:01 p.m.58 views

CVE-2023-47519

CVE-2023-47519 is a Cross-Site Request Forgery (CSRF) vulnerability in the WC Product Table Lite (WooCommerce Product Table Lite) plugin. Affected versions are 2.6.2 and earlier; a fix is available in version 3.1.0 and later. The PatchStack entry notes unauthenticated access and a low-severity fi...

8.8CVSS8AI score0.00294EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/18 12:00 a.m.9 views

WordPress Plugin WooCommerce Product Table Lite Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS6.6AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/18 12:00 a.m.11 views

PT-2023-30480 · Unknown · Woocommerce Product Table Lite

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Table Lite versions 2.6.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: F...

8.8CVSS8.6AI score0.00294EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/11/17 12:00 a.m.11 views

coreBOS Security Vulnerabilities

coreBOS is a JPL TSolucio open source commercial software capable of managing daily business needs. A security vulnerability exists in coreBOS version 8.0 and earlier versions. An attacker could exploit the vulnerability to inject malicious commands into tables...

8CVSS6.8AI score0.01285EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/11/14 3:46 p.m.10 views

kernel: udmabuf: Set ubuf->sg = NULL if the creation of sg table fails

A flaw was found in the Linux kernel’s udmabuf subsystem where the scatter-gather sg pointer was not properly set to NULL if creation of the sg table failed. If userspace attempts to map a dmabuf and the sg table allocation fails e.g., due to memory exhaustion, the kernel later attempts to free a...

5.8AI score0.00233EPSS
SaveExploits0References5
Rows per page
Query Builder