Lucene search
K

171 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/17 12:0 a.m.4 views

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the use of an uninitialized pointer, which allows a malicious actor to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of an uninitialized pointer during the processing of the itemVariationDataCount field. Exploitin...

7.8CVSS7.6AI score0.00437EPSS
Exploits0References4
OSV
OSV
added 2025/02/25 6:18 p.m.4 views

MAL-2025-191871 Malicious code in snapshot-photo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 61ed09e2fa2143dedd945c585d917ad8d7b55d7118e5093430b48c5c02d126f8 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

7.2AI score
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/02/05 12:23 p.m.8 views

CVE-2024-52444

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpopal Opal Woo Custom Product Variation opal-woo-custom-product-variation allows Path Traversal.This issue affects Opal Woo Custom Product Variation: from n/a through = 1.1.3...

7.5CVSS7.2AI score0.006EPSS
Exploits0References1
OSV
OSV
added 2025/01/23 10:15 a.m.2 views

CVE-2024-13511

The Variation Swatches for WooCommerce plugin, in all versions starting at 1.0.8 up until 1.3.2, contains a vulnerability due to improper nonce verification in its settings reset functionality. The issue exists in the settingsinit function, which processes a reset action based on specific query...

4.3CVSS5.8AI score0.00184EPSS
Exploits0References3
NVD
NVD
added 2025/01/23 10:15 a.m.18 views

CVE-2024-13511

The Variation Swatches for WooCommerce plugin, in all versions starting at 1.0.8 up until 1.3.2, contains a vulnerability due to improper nonce verification in its settings reset functionality. The issue exists in the settingsinit function, which processes a reset action based on specific query...

4.3CVSS0.00184EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/01/23 9:21 a.m.15 views

CVE-2024-13511 Variation Swatches for WooCommerce 1.0.8 - 1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset

The Variation Swatches for WooCommerce plugin, in all versions starting at 1.0.8 up until 1.3.2, contains a vulnerability due to improper nonce verification in its settings reset functionality. The issue exists in the settingsinit function, which processes a reset action based on specific query...

4.3CVSS0.00184EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/23 12:0 a.m.3 views

PT-2025-2198 · Woocommerce · Variation Swatches For Woocommerce

Name of the Vulnerable Software and Affected Versions: Variation Swatches for WooCommerce versions 1.0.8 through 1.3.2 Description: The issue is due to improper nonce verification in the settings reset functionality. It exists in the settings init function, which processes a reset action based on...

4.3CVSS6.9AI score0.00184EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/01/23 12:0 a.m.4 views

WordPress plugin Variation Swatches for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.4AI score0.00184EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/01/22 10:11 p.m.4 views

WordPress TH Variation Swatches plugin 1.0.8-1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset vulnerability

Cross-Site Request Forgery to Plugin Settings Reset vulnerability discovered by luckybuddy in WordPress Plugin TH Variation Swatches versions 1.0.8-1.3.2...

4.3CVSS7AI score0.00184EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/12/26 6:15 a.m.2 views

CVE-2024-12937

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationController.php. The manipulation of the argument qty leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.7AI score0.00528EPSS
Exploits0References5
NVD
NVD
added 2024/12/09 1:15 p.m.5 views

CVE-2023-28688

Cross-Site Request Forgery CSRF vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches: from n/a through 1.2.7...

5.4CVSS0.00194EPSS
Exploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.3 views

CVE-2023-28688

Cross-Site Request Forgery CSRF vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches: from n/a through 1.2.7...

5.4CVSS5.8AI score0.00194EPSS
Exploits0References1
CVE
CVE
added 2024/12/09 11:31 a.m.36 views

CVE-2023-28688

CVE-2023-28688 affects the WordPress plugin TH Variation Swatches (ThemeHunk TH Variation Swatches). A Cross-Site Request Forgery (CSRF) vulnerability exists in versions up to and including 1.2.7 and is caused by insufficient CSRF protection in the plugin’s settings/actions flow. Impact is limite...

5.4CVSS5.5AI score0.00194EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.3 views

PT-2024-12174

Name of the Vulnerable Software and Affected Versions TH Variation Swatches versions 1.2.7 and earlier Description A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This can lead to various security problems, as an...

5.4CVSS8.8AI score0.00194EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.2 views

WordPress plugin TH Variation Swatches 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS8.6AI score0.00194EPSS
Exploits0References1
NVD
NVD
added 2024/11/20 12:15 p.m.18 views

CVE-2024-52444

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpopal Opal Woo Custom Product Variation opal-woo-custom-product-variation allows Path Traversal.This issue affects Opal Woo Custom Product Variation: from n/a through = 1.1.3...

7.5CVSS0.006EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/20 11:8 a.m.26 views

CVE-2024-52444 WordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in wpopal Opal Woo Custom Product Variation opal-woo-custom-product-variation allows Path Traversal.This issue affects Opal Woo Custom Product Variation: from n/a through = 1.1.3...

7.5CVSS0.006EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/20 11:8 a.m.11 views

CVE-2024-52444 WordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPOPAL Opal Woo Custom Product Variation allows Path Traversal.This issue affects Opal Woo Custom Product Variation: from n/a through 1.1.3...

7.5CVSS6.8AI score0.006EPSS
Exploits0References1
CVE
CVE
added 2024/11/20 11:8 a.m.53 views

CVE-2024-52444

CVE-2024-52444 affects the WordPress plugin Opal Woo Custom Product Variation (versions

7.5CVSS7.2AI score0.006EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.1 views

WordPress plugin Opal Woo Custom Product Variation 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

7.5CVSS8.1AI score0.006EPSS
Exploits0References1
Rows per page
Query Builder