Lucene search
+L

10828 matches found

Cvelist
Cvelist
•added 2024/09/17 6:00 a.m.•47 views

CVE-2024-8047 Visual Sound (old) <= 1.06 - Settings Update via CSRF

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00229EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/17 6:00 a.m.•19 views

CVE-2024-8047 Visual Sound (old) <= 1.06 - Settings Update via CSRF

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

5.5AI score0.00229EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/17 12:00 a.m.•30 views

WordPress plugin Visual Sound 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS6.7AI score0.00229EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•10 views

CVE-2024-8047: Cross-Site Request Forgery (CSRF)

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00229EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/16 12:00 a.m.•24 views

PT-2024-38773 · WordPress · Visual Sound

Name of the Vulnerable Software and Affected Versions: The Visual Sound old WordPress plugin versions 1.06 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF...

6.5CVSS6.3AI score0.00229EPSS
SaveExploits1References8
Patchstack
Patchstack
•added 2024/09/12 10:40 a.m.•15 views

WordPress Visual Sound plugin <= 1.03 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound versions = 1.03...

6.5CVSS7AI score0.00253EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/09/12 6:15 a.m.•18 views

CVE-2024-7859

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/12 6:15 a.m.•28 views

CVE-2024-7859

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00253EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/09/12 6:00 a.m.•33 views

CVE-2024-7859 Visual Sound <= 1.03 - Settings Update via CSRF

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00253EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/12 6:00 a.m.•13 views

CVE-2024-7859 Visual Sound <= 1.03 - Settings Update via CSRF

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.8AI score0.00253EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/12 6:00 a.m.•68 views

CVE-2024-7859

The CVE-2024-7859 entry affects the Visual Sound WordPress plugin (versions

6.5CVSS6.3AI score0.00253EPSS
SaveExploits1References1Affected Software1
Fedora
Fedora
•added 2024/09/12 1:35 a.m.•30 views

[SECURITY] Fedora 39 Update: vim-9.1.719-1.fc39

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

5.5CVSS6.9AI score0.00352EPSS
SaveExploits0
Patchstack
Patchstack
•added 2024/09/12 12:00 a.m.•21 views

WordPress Visual Sound Plugin <= 1.03 is vulnerable to Cross Site Request Forgery (CSRF)

Software Visual Sound Type Plugin Vulnerable versions = 1.03 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7859 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9af6354dfaf3 Credits Daniel Ruf Required...

6.5CVSS6.7AI score0.00253EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2024/09/12 12:00 a.m.•13 views

WordPress plugin Visual Sound 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.5AI score0.00253EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/12 12:00 a.m.•6 views

CVE-2024-7859: Cross-Site Request Forgery (CSRF)

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/11 12:00 a.m.•21 views

PT-2024-38636 · WordPress · The Visual Sound

Name of the Vulnerable Software and Affected Versions: The Visual Sound WordPress plugin versions 1.03 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF attac...

6.5CVSS7AI score0.00253EPSS
SaveExploits1References6
The Hacker News
The Hacker News
•added 2024/09/09 12:16 p.m.•63 views

Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks

The China-linked advanced persistent threat APT group known as Mustang Panda has been observed weaponizing Visual Studio Code software as part of espionage operations targeting government entities in Southeast Asia. "This threat actor used Visual Studio Code's embedded reverse shell feature to ga...

8.6CVSS8.4AI score0.99978EPSS
SaveExploits54
Redos
Redos
•added 2024/09/04 12:00 a.m.•30 views

ROS-20240904-02

Vulnerability of Microsoft .NET software platforms and Microsoft software development tools Visual Studio is related to a heap buffer overflow. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

6.3CVSS7.1AI score0.01248EPSS
SaveExploits0
NVD
NVD
•added 2024/09/03 5:15 p.m.•27 views

CVE-2023-49233

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...

8.8CVSS0.00384EPSS
SaveExploits0References2
NVD
NVD
•added 2024/09/03 1:15 p.m.•34 views

CVE-2024-8388

Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121. This could lead to spoofing the browser UI if the sudden appearance of the prompt distracted the...

5.3CVSS0.00362EPSS
SaveExploits0References3
Rows per page
Query Builder