Lucene search
+L

617 matches found

BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•26 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•23 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•18 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to errors in data type mixing. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•16 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
Github Security Blog
Github Security Blog
•added 2024/11/20 6:23 p.m.•50 views

github.com/rancher/steve's users can issue watch commands for arbitrary resources

Impact A vulnerability has been discovered in Steve API Kubernetes API Translator in which users can watch resources they are not allowed to access, when they have at least some generic permissions on the type. For example, a user who can get a single secret in a single namespace can get all...

7.7CVSS7.3AI score0.00475EPSS
SaveExploits0References6Affected Software1
Patchstack
Patchstack
•added 2024/10/16 12:26 p.m.•22 views

WordPress Google Language Translator plugin <= 6.0.9 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by Ram in WordPress Plugin Google Language Translator versions 6.0.10...

7.1CVSS6.3AI score0.00513EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/10/16 8:15 a.m.•19 views

CVE-2021-4452

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary we...

5.4CVSS5.9AI score0.00513EPSS
SaveExploits0References4
NVD
NVD
•added 2024/10/16 8:15 a.m.•41 views

CVE-2021-4452

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary we...

7.1CVSS0.00513EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/10/16 7:31 a.m.•68 views

CVE-2021-4452 Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary we...

7.1CVSS0.00513EPSS
SaveExploits0References4
CVE
CVE
•added 2024/10/16 7:31 a.m.•96 views

CVE-2021-4452

CVE-2021-4452 affects the Google Language Translator plugin for WordPress (versions up to 6.0.9). The vulnerability is a Reflected Cross-Site Scripting flaw caused by insufficient input sanitization and output escaping in multiple parameters, enabling authenticated attackers to inject scripts in ...

7.1CVSS5.6AI score0.00513EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/16 7:31 a.m.•22 views

CVE-2021-4452 Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary we...

7.1CVSS6.1AI score0.00513EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•14 views

WordPress plugin Google Language Translator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS6.2AI score0.00513EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/10/16 12:00 a.m.•33 views

WordPress Google Language Translator Plugin < 6.0.10 is vulnerable to Cross Site Scripting (XSS)

Software Google Language Translator Type Plugin Vulnerable versions 6.0.10 Fixed in 6.0.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2021-4452 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3695267a00ad Credits Ram Required...

7.1CVSS5.8AI score0.00513EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/16 12:00 a.m.•4 views

CVE-2021-4452: Improper Neutralization of Input During Web Page Generation

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary we...

7.1CVSS5.9AI score0.00513EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/16 12:00 a.m.•24 views

PT-2024-11049 · WordPress · Google Language Translator

Name of the Vulnerable Software and Affected Versions: Google Language Translator plugin for WordPress versions up to, and including, 6.0.9 Description: The issue is related to Reflected Cross-Site Scripting via multiple parameters due to insufficient input sanitization and output escaping. This...

7.1CVSS6.6AI score0.00513EPSS
SaveExploits0References10
Patchstack
Patchstack
•added 2024/09/25 6:38 a.m.•20 views

WordPress Prisna GWT - Google Website Translator plugin <= 1.4.11 - Authenticated (Admin+) PHP Object Injection vulnerability

WordPress Prisna GWT - Google Website Translator plugin = 1.4.11 - Authenticated Admin+ PHP Object Injection vulnerability discovered by Lesor101 in WordPress Plugin Prisna GWT – Google Website Translator versions = 1.4.11...

9.1CVSS7.3AI score0.00996EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/09/25 4:15 a.m.•26 views

CVE-2024-8514

The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisnaimport' parameter. This makes it possible for authenticated attackers, with Administrator-level...

9.1CVSS0.00996EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/09/25 3:27 a.m.•39 views

CVE-2024-8514 Prisna GWT - Google Website Translator <= 1.4.11 - Authenticated (Admin+) PHP Object Injection

The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisnaimport' parameter. This makes it possible for authenticated attackers, with Administrator-level...

9.1CVSS0.00996EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/09/25 3:27 a.m.•15 views

CVE-2024-8514 Prisna GWT - Google Website Translator <= 1.4.11 - Authenticated (Admin+) PHP Object Injection

The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisnaimport' parameter. This makes it possible for authenticated attackers, with Administrator-level...

9.1CVSS9.2AI score0.00996EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/09/25 12:00 a.m.•22 views

WordPress Prisna GWT – Google Website Translator Plugin <= 1.4.11 is vulnerable to PHP Object Injection

Software Prisna GWT – Google Website Translator Type Plugin Vulnerable versions = 1.4.11 Fixed in 1.4.12 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-8514 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID 96a1cccedfb0 Credits Lesor101 Required...

9.1CVSS6.9AI score0.00996EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder