Lucene search
K

8 matches found

CNNVD
CNNVD
added 2025/03/31 12:0 a.m.2 views

WordPress plugin WP Date and Time Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.6AI score0.00174EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.1 views

WordPress plugin WP Project Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.6AI score0.00574EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/08/08 12:0 a.m.2 views

PT-2024-6670 · Unknown +3 · Oath Toolkit +3

Name of the Vulnerable Software and Affected Versions: oath-toolkit versions 2.6.7 through 2.6.11 Description: The issue is related to a local root exploit in the PAM module pam oath.so of the oath-toolkit. It allows root privilege escalation because, in the context of PAM code running as root, i...

7.1CVSS7.2AI score0.00076EPSS
Exploits0References86
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.3 views

WordPress plugin Fat Rat Collect security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.8AI score0.00168EPSS
Exploits0References2
Amazon
Amazon
added 2024/06/12 12:0 a.m.2 views

Medium: ruby

Issue Overview: An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network...

7.4CVSS6.8AI score0.00074EPSS
Exploits1
Patchstack
Patchstack
added 2024/03/29 9:53 a.m.3 views

WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Slugs Manager versions = 2.6.7...

4.3CVSS8.4AI score0.00077EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/01 12:0 a.m.3 views

PT-2023-18602

Name of the Vulnerable Software and Affected Versions SUSE Rancher versions 2.6.7 through 2.6.12 SUSE Rancher versions 2.7.0 through 2.7.3 Description The issue is related to improper privilege management, where changes in Azure AD permissions are not reflected in the Rancher UI for logged-in...

8.8CVSS7.2AI score0.00215EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:23 a.m.1 views

SUSE CVE-2022-39047

Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL...

8.8CVSS8.9AI score0.00681EPSS
Exploits0References3
Rows per page
Query Builder