Lucene search
+L

207 matches found

Cvelist
Cvelist
added 2023/03/01 2:8 p.m.23 views

CVE-2022-46805 WordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin = 2.3.1 leading to activation/deactivation of plugin rulesets...

5.4CVSS5.9AI score0.00215EPSS
Exploits0References1
CVE
CVE
added 2023/03/01 2:8 p.m.54 views

CVE-2022-46805

The CVE-2022-46805 entry documents a CSRF vulnerability in the WP Trio Conditional Shipping for WooCommerce plugin (versions ≤ 2.3.1). The flaw enables activation/deactivation of plugin rulesets via CSRF. Public sources identify the affected software as WordPress Conditional Payments for WooComme...

5.4CVSS6AI score0.00215EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/02/02 9:22 p.m.2 views

CVE-2022-46815

Cross-Site Request Forgery CSRF vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin = 2.3.1 versions...

8.8CVSS5.8AI score0.00264EPSS
Exploits0References1
CVE
CVE
added 2023/02/02 4:21 p.m.41 views

CVE-2022-46815

The CVE-2022-46815 entry concerns the WordPress WP Trio Conditional Shipping for WooCommerce plugin (versions

8.8CVSS8AI score0.00264EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/02 12:0 a.m.8 views

PT-2023-15058 · WordPress · Wp Trio Conditional Shipping For Woocommerce

Name of the Vulnerable Software and Affected Versions: Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin versions prior to 2.3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user...

8.8CVSS8.5AI score0.00264EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/09/05 12:0 a.m.6 views

PT-2022-4660 · Zyxel · Zyxel Nas326 +2

Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 firmware versions prior to V5.21AAZF.12C0 Zyxel NAS540 firmware versions prior to V5.21AAZF.12C0 Zyxel NAS542 firmware versions prior to V5.21AAZF.12C0 Description: A format string vulnerability could allow an attacker to achieve...

9.8CVSS9.6AI score0.01539EPSS
Exploits0References8
Openbugbounty
Openbugbounty
added 2022/06/22 5:2 a.m.8 views

trio-cloud.com Cross Site Scripting vulnerability OBB-2663278

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2022/03/17 12:24 a.m.11 views

trio-daszentrum.ch Cross Site Scripting vulnerability OBB-2435156

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploits0
CNVD
CNVD
added 2021/12/29 12:0 a.m.40 views

Polycom Trio Remote Code Execution Vulnerability

The Polycom Trio is a Trio series of business conference phones from Polycom USA. A remote code execution vulnerability exists in Polycom Trio, which can be exploited by an attacker to execute commands via unspecified vectors...

8.8CVSS9AI score0.02683EPSS
Exploits1References1
OSV
OSV
added 2021/12/28 1:15 p.m.5 views

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

8.8CVSS6.4AI score0.02683EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/12/28 12:28 p.m.31 views

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

8.9AI score0.02683EPSS
Exploits1References2
CVE
CVE
added 2021/12/28 12:28 p.m.56 views

CVE-2018-17875

Poly Trio 8800 devices running 5.7.1.4145 are affected by CVE-2018-17875, a remote code execution vulnerability in the ping command that allows remote authenticated users to execute commands via unspecified vectors. Impact is high for unauthenticated? No, authenticated users per description; CVSS...

8.8CVSS8.8AI score0.02683EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/12/28 12:0 a.m.5 views

Polycom Trio 安全漏洞

The Polycom Trio is a Trio series of business conference phones from Polycom USA. A remote code execution vulnerability exists in Polycom Trio, which can be exploited by an attacker to execute commands via unspecified vectors...

8.8CVSS6.7AI score0.02683EPSS
Exploits1References2
Prion
Prion
added 2021/07/15 8:15 p.m.16 views

Design/Logic Flaw

A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs Modular Port Concentrators may cause FPC to crash and lead to a Denial of Service DoS condition. Continued receipt of this packet will sustain the...

3.3CVSS6.4AI score0.00381EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/07/15 8:1 p.m.73 views

CVE-2021-0288

CVE-2021-0288 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs. The vulnerability stems from how specific MPLS packets are processed, potentially causing the FPC to crash and triggering a DoS if packets continue to arrive. Affected versions are listed in the core CVE d...

6.5CVSS6.5AI score0.00381EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/15 8:1 p.m.28 views

CVE-2021-0288 Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs

A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs Modular Port Concentrators may cause FPC to crash and lead to a Denial of Service DoS condition. Continued receipt of this packet will sustain the...

6.5CVSS6.6AI score0.00381EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/05/10 12:0 a.m.95 views

Juniper Junos DoS (JSA11148)

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11148 advisory. On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB...

6.5CVSS6.6AI score0.00404EPSS
Exploits0References2
OSV
OSV
added 2021/04/22 8:15 p.m.7 views

CVE-2021-0273

An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 devices with affected Trio line cards allows an attacker to exploit an interdependency in the PFE UCODE...

5.3CVSS6AI score0.01003EPSS
Exploits0References1
NVD
NVD
added 2021/04/22 8:15 p.m.37 views

CVE-2021-0257

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

6.5CVSS0.00404EPSS
Exploits0References1
NVD
NVD
added 2021/04/22 8:15 p.m.24 views

CVE-2021-0228

An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC Modular Port Concentrator deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause...

6.5CVSS0.00404EPSS
Exploits0References1
Rows per page
Query Builder