Lucene search
+L

434 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•0 views

CVE-2023-51414: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1...

9.8CVSS8.2AI score0.00565EPSS
SaveExploits0References2
Circl
Circl
•added 2023/12/28 8:26 p.m.•17 views

CVE-2023-50840

creationtimestamp| type| source ---|---|--- 2023-12-28 20:26:44+00:00| seen| https://t.me/ctinow/160170 2024-01-20 14:46:21+00:00| seen| https://t.me/ctinow/170639...

8.8CVSS8.6AI score0.00533EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2023/12/24 7:57 p.m.•12 views

ataxia-y-ataxicos.es Improper Access Control vulnerability OBB-3821234

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
NVD
NVD
•added 2023/12/18 10:15 p.m.•35 views

CVE-2023-48781

Cross-Site Request Forgery CSRF vulnerability in Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC.This issue affects MkRapel Regiones y Ciudades de Chile para WC: from n/a through 4.3.0...

8.8CVSS0.00272EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/18 10:15 p.m.•18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC.This issue affects MkRapel Regiones y Ciudades de Chile para WC: from n/a through 4.3.0...

6.8CVSS7.2AI score0.00272EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/18 10:05 p.m.•76 views

CVE-2023-48781

CVE-2023-48781: MkRapel Regiones y Ciudades de Chile para WC WordPress plugin is vulnerable to Cross-Site Request Forgery (CSRF) for versions up to and including 4.3.0. Public advisories indicate unauthenticated attackers could trigger actions on behalf of site admins; the vulnerability is curren...

8.8CVSS8.5AI score0.00272EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/18 10:05 p.m.•44 views

CVE-2023-48781 WordPress MkRapel Regiones y Ciudades de Chile para WC Plugin <= 4.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC.This issue affects MkRapel Regiones y Ciudades de Chile para WC: from n/a through 4.3.0...

4.3CVSS8.9AI score0.00272EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•3 views

CVE-2023-48781: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC.This issue affects MkRapel Regiones y Ciudades de Chile para WC: from n/a through 4.3.0...

8.8CVSS7.8AI score0.00272EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2023/12/16 1:48 a.m.•6 views

y-kajuen.com Improper Access Control vulnerability OBB-3815833

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/12/16 1:48 a.m.•5 views

y-clinic.com Improper Access Control vulnerability OBB-3815832

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2023/12/12 5:24 p.m.•13 views

pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write

A flaw was found in pixman. This issue causes an out-of-bounds write in rasterizeedges8 due to an integer overflow in pixmansamplefloory. This can result in data corruption, a crash, or code execution...

8.8CVSS5.9AI score0.01524EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2023/11/28 3:39 p.m.•19 views

pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write

A flaw was found in pixman. This issue causes an out-of-bounds write in rasterizeedges8 due to an integer overflow in pixmansamplefloory. This can result in data corruption, a crash, or code execution...

8.8CVSS5.9AI score0.01524EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2023/11/21 11:18 a.m.•17 views

pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write

A flaw was found in pixman. This issue causes an out-of-bounds write in rasterizeedges8 due to an integer overflow in pixmansamplefloory. This can result in data corruption, a crash, or code execution...

8.8CVSS5.9AI score0.01524EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2023/11/21 11:12 a.m.•14 views

pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write

A flaw was found in pixman. This issue causes an out-of-bounds write in rasterizeedges8 due to an integer overflow in pixmansamplefloory. This can result in data corruption, a crash, or code execution...

8.8CVSS5.9AI score0.01524EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2023/10/18 12:00 a.m.•11 views

The vulnerability of the Sangfor NGAF firewall lies in its ability to bypass the authentication mechanism, allowing attackers to circumvent the authentication process.

The vulnerability of the Sangfor NGAF firewall lies in its ability to bypass the authentication mechanism. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process by using specially crafted HTTP requests and a specially created Y-forwarded-for header...

10CVSS6.9AI score0.18206EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2023/10/10 3:15 p.m.•37 views

CVE-2023-30803

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header...

9.8CVSS6.2AI score0.18206EPSS
SaveExploits1References3
OSV
OSV
•added 2023/10/10 3:15 p.m.•18 views

CVE-2023-30803

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header...

9.8CVSS5.9AI score0.18206EPSS
SaveExploits1References3
Prion
Prion
•added 2023/10/10 3:15 p.m.•42 views

Authentication flaw

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header...

7.5CVSS6.9AI score0.18206EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/10 2:14 p.m.•17 views

CVE-2023-30803 Sangfor Next-Gen Application Firewall Authentication Bypass

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header...

9.8CVSS7.3AI score0.18206EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•2 views

CVE-2023-30803: Authentication Bypass by Spoofing

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header...

9.8CVSS7.6AI score0.18206EPSS
SaveExploits1References3
Rows per page
Query Builder