Lucene search
+L

434 matches found

Positive Technologies
Positive Technologies
added 2024/03/29 12:00 a.m.9 views

PT-2024-23366 · Unknown · Bplugins Print Page Block

Name of the Vulnerable Software and Affected Versions: bPlugins Print Page block versions 1.0.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...

6.5CVSS8.8AI score0.00352EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/03/28 12:00 a.m.18 views

WordPress Print Page block Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Print Page block Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30438 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 81c9eb620052 Credits CatFather Required privilege...

6.5CVSS6.6AI score0.00352EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.12 views

domain-suffix 安全漏洞

domain-suffix is a Node.js package. A security vulnerability exists in domain-suffix version 1.0.8, which stems from a vulnerability that allows an attacker to crash an application using crafted input via the parse function...

7.5CVSS6.7AI score0.00575EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/20 12:00 a.m.23 views

WordPress GamiPress – Button Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software GamiPress – Button Type Plugin Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2460 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 46fbe1f93240 Credits Francesco Carlucci...

6.4CVSS6AI score0.00435EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/03/13 4:15 p.m.8 views

CVE-2024-1370

The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribedownload function hooked via AJAX action in all versions up to, and including, 1.0.8. This makes it possible for authenticated attackers, with subscriber access...

4.3CVSS5.8AI score0.00445EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/13 4:15 p.m.32 views

CVE-2024-1370

The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribedownload function hooked via AJAX action in all versions up to, and including, 1.0.8. This makes it possible for authenticated attackers, with subscriber access...

5.3CVSS5AI score0.00445EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.14 views

WordPress Plugin Maintenance Page Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.4AI score0.00445EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.11 views

WordPress Plugin Maintenance Page Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS5.9AI score0.0053EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.14 views

PT-2024-18066 · WordPress · Maintenance Page

Name of the Vulnerable Software and Affected Versions: Maintenance Page plugin for WordPress versions up to, and including, 1.0.8 Description: The issue allows unauthenticated attackers to view post titles and content when the site is in maintenance mode, due to Basic Information Exposure via the...

5.3CVSS9.6AI score0.0053EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 11:00 a.m.44 views

BIT-DOTNET-SDK-2020-8927 Buffer overflow in Brotli library

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli...

9.8CVSS7.1AI score0.03217EPSS
SaveExploits0References15
VulnCheck KEV
VulnCheck KEV
added 2024/02/05 12:00 a.m.6 views

VulnCheck KEV: CVE-2018-13315

Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated POST request...

9.8CVSS7.3AI score0.01555EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.12 views

Quick Reboot Security Vulnerability

Quick Reboot is an application for Android. A security vulnerability exists in Quick Reboot version 1.0.8, which stems from a lack of input validation and leaves the receiver vulnerable to unauthorized broadcasts...

7.5CVSS6.8AI score0.0077EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/31 8:15 p.m.13 views

CVE-2024-1116

A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed t...

9.8CVSS5.4AI score0.00769EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/01/31 12:00 a.m.13 views

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI prior to version 1.0.8, which stems from a problem in the index function of the /application/plugins/controller/Upload.php file, which could lead to unrestricted file uploads...

9.8CVSS6.9AI score0.00769EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/31 12:00 a.m.12 views

PT-2024-16784 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue has been found, affecting the dlfile function of the file /application/index/controller/Screen.php. The manipulation of the fileUrl argument leads to improper access controls. The atta...

9.8CVSS6.6AI score0.00856EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/01/31 12:00 a.m.19 views

PT-2024-19246 · WordPress · Wolf – Wordpress Posts Bulk Editor/Manager

Name of the Vulnerable Software and Affected Versions: WOLF – WordPress Posts Bulk Editor and Manager Professional versions 1.0.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected...

7.1CVSS6.5AI score0.00331EPSS
SaveExploits0References5
OSV
OSV
added 2024/01/30 4:15 p.m.10 views

CVE-2024-1035

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The...

9.8CVSS5.5AI score0.00797EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/01/30 12:00 a.m.10 views

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI Inc. A code issue vulnerability exists in openBI version 1.0.8, which stems from an unrestricted file upload in the uploadIcon method of the /application/index/controller/Icon.php file...

9.8CVSS7.2AI score0.00797EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/01/30 12:00 a.m.7 views

openBI Security Vulnerabilities

openBI is a big data visualization solution from openBI Inc. A security vulnerability exists in openBI version 1.0.8, which stems from an unrestricted file upload in the uploadFile method of the /application/index/controller/File.php file...

9.8CVSS6.9AI score0.00764EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/30 12:00 a.m.12 views

PT-2024-16208 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical vulnerability has been found in openBI, affecting the uploadIcon function of the file /application/index/controller/Icon.php. The manipulation of the image argument leads to unrestricted...

9.8CVSS7.3AI score0.00797EPSS
SaveExploits0References8
Rows per page
Query Builder