Lucene search
+L

10447 matches found

NVD
NVD
•added 2024/01/15 4:15 p.m.•46 views

CVE-2023-6623

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks...

9.8CVSS9.4AI score0.50673EPSS
SaveExploits2References2
Prion
Prion
•added 2024/01/15 4:15 p.m.•38 views

Design/Logic Flaw

The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks...

7.5CVSS7AI score0.50673EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2024/01/15 3:10 p.m.•208 views

CVE-2023-6623

The Essential Blocks WordPress plugin (versions prior to 4.4.3 ) contains a Local File Inclusion vulnerability. The root cause is a failure to prevent unauthenticated attackers from overwriting local variables when rendering templates via the REST API . Exploitation of this flaw allows an attacke...

9.8CVSS8.2AI score0.50673EPSS
SaveIn wildExploits2References2Affected Software1
osv_ghsa
osv_ghsa
•added 2024/01/15 12:30 p.m.•44 views

GHSA-GG7W-PW2R-X2CQ Apache Solr allows read access to host environmet variables

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

6.5CVSS6.5AI score0.68446EPSS
SaveExploits1References5
Prion
Prion
•added 2024/01/15 10:15 a.m.•38 views

Design/Logic Flaw

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

4CVSS7AI score0.68446EPSS
SaveExploits1References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2024/01/15 10:15 a.m.•23 views

UBUNTU-CVE-2023-50290

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

6.5CVSS6.5AI score0.68446EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/15 9:32 a.m.•64 views

CVE-2023-50290 Apache Solr: Host environment variables are published via the Metrics API

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

6.6AI score0.68446EPSS
SaveExploits1References1
Mend
Mend
•added 2024/01/15 9:32 a.m.•11 views

CVE-2023-50290

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

7.1CVSS6.5AI score0.68446EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2024/01/15 9:32 a.m.•124 views

CVE-2023-50290

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

6.5CVSS6.5AI score0.68446EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/15 12:00 a.m.•7 views

CVE-2023-50290: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

6.5CVSS6.6AI score0.68446EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2024/01/15 12:00 a.m.•55 views

CVE-2023-50290

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

6.5CVSS6.5AI score0.68446EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2024/01/12 9:31 p.m.•134 views

CVE-2023-50290

A flaw was found in Apache Solr. This issue may allow an unauthorized actor access to sensitive information. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the...

6.5CVSS6.5AI score0.68446EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/12 12:00 a.m.•21 views

NVIDIA DGX Security Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in NVIDIA DGX A100 Servers, which stems from the possibility that a user may be able to cause dynamic variables to be evaluated via local access...

7.5CVSS6.4AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•10 views

PT-2024-1138 · Apache · Apache Solr

Name of the Vulnerable Software and Affected Versions: Apache Solr versions 9.0.0 through 9.3.0 Description: The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the...

6.8CVSS6.5AI score0.68446EPSS
SaveExploits1References24
NVD
NVD
•added 2024/01/10 10:15 p.m.•49 views

CVE-2023-40394

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data...

3.3CVSS2.8AI score0.00202EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/10 10:15 p.m.•18 views

CVE-2023-40394

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data...

3.3CVSS5.3AI score0.00202EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/10 10:03 p.m.•42 views

CVE-2023-40394

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data...

4.3AI score0.00202EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/01/10 10:03 p.m.•11 views

CVE-2023-40394

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data...

5.3AI score0.00202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•6 views

CVE-2023-40394: Improper Input Validation

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data...

3.3CVSS5.4AI score0.00202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•8 views

PT-2024-12889

Name of the Vulnerable Software and Affected Versions iOS versions prior to 16.6 iPadOS versions prior to 16.6 Description The issue allows an app to potentially access sensitive user data due to inadequate validation of environment variables. This was addressed with improved validation...

3.3CVSS5.3AI score0.00202EPSS
SaveExploits0References4
Rows per page
Query Builder