Lucene search
K

529 matches found

CNNVD
CNNVD
added 2024/10/16 12:0 a.m.2 views

WordPress plugin Google Language Translator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS6.2AI score0.00471EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/16 12:0 a.m.4 views

PT-2024-11049 · WordPress · Google Language Translator

Name of the Vulnerable Software and Affected Versions: Google Language Translator plugin for WordPress versions up to, and including, 6.0.9 Description: The issue is related to Reflected Cross-Site Scripting via multiple parameters due to insufficient input sanitization and output escaping. This...

7.1CVSS6.6AI score0.00471EPSS
Exploits0References10
Patchstack
Patchstack
added 2024/10/16 12:0 a.m.19 views

WordPress Google Language Translator Plugin < 6.0.10 is vulnerable to Cross Site Scripting (XSS)

Software Google Language Translator Type Plugin Vulnerable versions 6.0.10 Fixed in 6.0.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2021-4452 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3695267a00ad Credits Ram Required...

7.1CVSS5.8AI score0.00471EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2024/09/25 6:38 a.m.4 views

WordPress Prisna GWT - Google Website Translator plugin <= 1.4.11 - Authenticated (Admin+) PHP Object Injection vulnerability

WordPress Prisna GWT - Google Website Translator plugin = 1.4.11 - Authenticated Admin+ PHP Object Injection vulnerability discovered by Lesor101 in WordPress Plugin Prisna GWT – Google Website Translator versions = 1.4.11...

9.1CVSS7.3AI score0.00968EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/09/25 4:15 a.m.13 views

CVE-2024-8514

The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisnaimport' parameter. This makes it possible for authenticated attackers, with Administrator-level...

9.1CVSS0.00968EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/09/25 3:27 a.m.21 views

CVE-2024-8514 Prisna GWT - Google Website Translator <= 1.4.11 - Authenticated (Admin+) PHP Object Injection

The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisnaimport' parameter. This makes it possible for authenticated attackers, with Administrator-level...

9.1CVSS0.00968EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/09/25 3:27 a.m.11 views

CVE-2024-8514 Prisna GWT - Google Website Translator <= 1.4.11 - Authenticated (Admin+) PHP Object Injection

The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisnaimport' parameter. This makes it possible for authenticated attackers, with Administrator-level...

9.1CVSS9.2AI score0.00968EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/09/25 12:0 a.m.12 views

WordPress Prisna GWT – Google Website Translator Plugin <= 1.4.11 is vulnerable to PHP Object Injection

Software Prisna GWT – Google Website Translator Type Plugin Vulnerable versions = 1.4.11 Fixed in 1.4.12 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-8514 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID 96a1cccedfb0 Credits Lesor101 Required...

9.1CVSS6.9AI score0.00968EPSS
Exploits0References3Affected Software1
Gentoo Linux
Gentoo Linux
added 2024/09/22 12:0 a.m.15 views

liblouis: Multiple Vulnerabilities

Background liblouis is an open-source braille translator and back-translator. Description Multiple vulnerabilities have been discovered in liblouis. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is...

7.5CVSS7.7AI score0.01498EPSS
Exploits2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/07 11:53 p.m.3 views

Malicious code in @fs-mco/error-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f40668c1855c5832f8032a2de8d5e2dd5597d95e83d685b0cdbd6363ad55830d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.2 views

The vulnerability of the pre-processing processor Simcenter Femap and the file conversion tool set between different formats (PS/IGES Parasolid Translator) lies in the reading of data beyond the buffer boundary in memory. This allows an attacker to execute arbitrary code.

The vulnerability of the pre-processing processor Simcenter Femap and the file conversion tool set between different formats PS/IGES Parasolid Translator is related to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute...

7.8CVSS7.8AI score0.00279EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:0 a.m.2 views

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator, arises from the possibility of the operation exceeding the buffer boundaries in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the file conversion tools between different formats PS/IGES, Parasolid Translator is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.0039EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:0 a.m.4 views

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator, arises from the possibility of the operation exceeding the buffer boundaries in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the file conversion tools between different formats PS/IGES, Parasolid Translator is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.0039EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:0 a.m.3 views

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator, arises from buffer overflows. This allows attackers to execute arbitrary code.

The vulnerability of the file conversion tools between different formats in PS/IGES Parasolid Translator lies in the overflow of the buffer based on a queue. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.0039EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:0 a.m.3 views

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator, arises from the possibility of the operation exceeding the buffer boundaries in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the file conversion tools between different formats PS/IGES, Parasolid Translator is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.0039EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/24 12:0 a.m.3 views

The vulnerability of the file conversion tools between different formats (PS/IGES Parasolid Translator) is related to errors in data type mixing. This allows a malicious actor to execute arbitrary code.

The vulnerability of the file conversion tools between different formats in PS/IGES Parasolid Translator is related to errors in data type mixing. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening specially created IGS files...

7.8CVSS7.6AI score0.0039EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/24 12:0 a.m.3 views

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator, arises from the possibility of the operation exceeding the buffer boundaries in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the file conversion tools between different formats in PS/IGES Parasolid Translator lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening specially created IGS files...

7.8CVSS8AI score0.0039EPSS
Exploits0References4Affected Software1
Patchstack
Patchstack
added 2024/05/23 8:19 a.m.2 views

WordPress Automatic Translator with Google Translate plugin <= 1.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Font vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Custom Font vulnerability discovered by emad in WordPress Plugin Automatic Translator with Auto Translate versions = 1.5.4...

4.4CVSS5.8AI score0.00271EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/05/23 12:0 a.m.9 views

WordPress Automatic Translator with Auto Translate Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Automatic Translator with Auto Translate Type Plugin Vulnerable versions = 1.5.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0632 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 37c2d281da0f Credits...

4.4CVSS5.8AI score0.00271EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/05/22 12:0 a.m.3 views

WordPress plugin Automatic Translator with Google Translate 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.4CVSS6.6AI score0.00271EPSS
Exploits0References3
Rows per page
Query Builder