Lucene search
+L

225 matches found

CNNVD
CNNVD
added 2024/06/28 12:0 a.m.4 views

WordPress plugin Simple Photoswipe security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.8AI score0.00547EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.13 views

PT-2024-26848 · WordPress · Promolayer

Name of the Vulnerable Software and Affected Versions: Promolayer plugin for WordPress versions up to, and including, 1.1.0 Description: The Promolayer plugin for WordPress is affected by an issue that allows unauthorized updates to plugin settings. This is due to a missing capability check on th...

4.3CVSS6.7AI score0.00345EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/06/06 12:0 a.m.6 views

PT-2024-34582 · Lunary Ai · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary versions 1.2.2 through 1.2.24 Description: An improper access control issue exists in the versions.patch functionality for updating prompts, allowing unauthorized users to update prompt details due to insufficient access...

7.6CVSS7.5AI score0.00312EPSS
Exploits1References5
OSV
OSV
added 2024/05/24 7:15 a.m.4 views

CVE-2024-1376

The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing capability check on the savebulkdatas function in all versions up to, and including, 5.9.4. This makes it possible for authenticated attackers, with subscriber access or higher, to update...

4.3CVSS5.8AI score0.0028EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/04/08 4:59 a.m.9 views

WordPress WP-Stateless plugin <= 3.4.0 - Missing Authorization to Limited Arbitrary Options Update vulnerability

Missing Authorization to Limited Arbitrary Options Update vulnerability discovered by Krzysztof Zając in WordPress Plugin WP-Stateless versions = 3.4.0...

7.1CVSS7AI score0.00409EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2024/02/22 12:0 a.m.42 views

Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11152)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...

5.5CVSS6.5AI score0.0081EPSS
Exploits0References1
NVD
NVD
added 2024/02/05 10:16 p.m.23 views

CVE-2024-0869

The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrary options update due to an insufficient check that neglects to verify whether the updated option belongs to the plugin on the instant-images/license...

8.8CVSS8.6AI score0.00791EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.7 views

WordPress plugin Instant Images security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.9AI score0.00791EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.5 views

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

6.1CVSS6.6AI score0.00168EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.7 views

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Application Object Library AOL, Application Object Library are both products of the United States Oracle Oracle. Oracle E-Business Suite is a fully integrated set of global business management software. Oracle E-Business Suite is a set of fully...

6.5CVSS6.7AI score0.00322EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.7 views

Oracle Enterprise Manager Base Platform Security Vulnerability

Oracle Enterprise Manager Base Platform is a set of local management platform from Oracle Corporation in the United States. The platform is primarily used to manage Oracle product deployments. ecto is an elixir-ecto open source toolkit for data mapping and language integration queries. A security...

7.5CVSS6.4AI score0.00378EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.5 views

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

6.1CVSS6.6AI score0.00361EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.9 views

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

6.1CVSS6.6AI score0.00361EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/17 12:0 a.m.5 views

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

5.4CVSS6.6AI score0.0034EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.6 views

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Knowledge Management is one of the knowledge...

6.1CVSS6.7AI score0.00168EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.5 views

Oracle BI Publisher Security Vulnerability

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher version 12.2.1.4.0 for Oracle Analytics. An...

5.4CVSS6.6AI score0.00308EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.6 views

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other capabilities. iSupport is one of the Internet-based customer suppo...

5.4CVSS6.7AI score0.00163EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.6 views

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Customer...

6.1CVSS6.6AI score0.00327EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.9 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. A security vulnerability exists in Oracle WebCenter Content version...

6.1CVSS6.7AI score0.00326EPSS
Exploits0References3
OSV
OSV
added 2024/01/11 9:15 a.m.5 views

CVE-2023-6598

The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycachesavevarniship, speedycacheimgupdatesettings, speedycachepreloadingaddsettings, and speedycachepreloadingdeleteresource functions in all versions up to, and...

4.3CVSS5.8AI score0.00358EPSS
Exploits0References2
Rows per page
Query Builder