Lucene search
+L

1512 matches found

Patchstack
Patchstack
added 2025/04/10 9:31 a.m.9 views

WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dimas Maulana in WordPress Plugin Zephyr Project Manager versions = 3.3.101...

7.1CVSS6.9AI score0.00295EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.5 views

Zephyr 缓冲区错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A buffer error vulnerability exists in Zephyr 4.0 and prior versions, which stems from insufficient input validation and could result in an out-of-bounds read triggered by a malicious or malformed packet...

8.2CVSS6.9AI score0.00358EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.5 views

Zephyr 缓冲区错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A buffer error vulnerability exists in Zephyr 4.0 and prior versions, which stems from malicious or malformed packets that could lead to out-of-bounds reads, resulting in a crash or incorrect computation...

8.2CVSS6.9AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/25 12:0 a.m.10 views

PT-2025-7818 · Zephyrproject Rtos · Zephyr

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the function dns copy qname in dns pack.c, which performs a memcpy operation with an untrusted field. It does not check if the source buffer is large enough to contai...

9.1CVSS7.2AI score0.00372EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.3 views

Zephyr 缓冲区错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A buffer error vulnerability exists in Zephyr 4.0 and prior versions that stems from not checking the source buffer size, which could result in a data copy error...

9.1CVSS6.8AI score0.00372EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/13 7:38 p.m.22 views

CVE-2023-5184

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

8.8CVSS7.5AI score0.00391EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/13 7:33 p.m.14 views

CVE-2023-4264

Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem...

9.6CVSS7.6AI score0.00901EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/06 2:23 a.m.6 views

CVE-2025-22814

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through = 1.4.1...

7.1CVSS7.2AI score0.00146EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:59 a.m.11 views

CVE-2024-7624

The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 3.3.101. This is due to the plugin not properly checking a users capabilities before allowing them to enable access to the plugin's settings through the...

8.1CVSS6.8AI score0.00402EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:40 a.m.7 views

CVE-2024-37484

Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...

8.8CVSS6.9AI score0.00443EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:28 p.m.12 views

CVE-2024-8798

No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...

7.5CVSS6.9AI score0.00401EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.9 views

Zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr 3.7 and earlier versions that stems from a lack of proper validation of the length of user input...

8.6CVSS6.6AI score0.003EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/09 4:16 p.m.12 views

CVE-2025-22814

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through = 1.4.1...

7.1CVSS0.00146EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/09 3:39 p.m.55 views

CVE-2025-22814

CVE-2025-22814 is a Cross-Site Request Forgery to Stored Cross‑Site Scripting vulnerability in Zephyr Admin Theme. Affected: Zephyr Admin Theme versions from n/a up to 1.4.1. The provided documents do not include explicit exploitation details or a confirmed fix/patch.

7.1CVSS7.2AI score0.00146EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 3:39 p.m.14 views

CVE-2025-22814 WordPress Zephyr Admin Theme Plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through = 1.4.1...

7.1CVSS8.5AI score0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/09 3:39 p.m.21 views

CVE-2025-22814 WordPress Zephyr Admin Theme Plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through = 1.4.1...

7.1CVSS0.00146EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.5 views

PT-2025-4723 · Unknown · Zephyr Admin Theme

Name of the Vulnerable Software and Affected Versions: Zephyr Admin Theme versions 1.4.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user...

7.1CVSS7.2AI score0.00146EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.4 views

WordPress plugin Zephyr Admin Theme 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.3AI score0.00146EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/07 9:55 p.m.5 views

WordPress Zephyr Admin Theme Plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Zephyr Admin Theme versions = 1.4.1...

7.1CVSS6.2AI score0.00146EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/12/16 12:0 a.m.6 views

Zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr 3.7 and earlier versions that stems from improper validation of user input by the olcpindhandler function...

7.5CVSS6.7AI score0.00401EPSS
SaveExploits0References1
Rows per page
Query Builder