Lucene search
K

1248 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:41 a.m.3 views

CVE-2023-0275

The Easy Accept Payments for PayPal WordPress plugin before 4.9.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...

5.4CVSS5.5AI score0.00296EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:54 a.m.6 views

CVE-2022-47422

Cross-Site Request Forgery CSRF vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin = 3.1.5 versions...

8.8CVSS7AI score0.00106EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 7:36 p.m.6 views

CVE-2021-29627

In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters implementing the accfcreate callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double fr...

7.8CVSS6.8AI score0.0105EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:24 p.m.3 views

CVE-2020-11511

The LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privileges of any user to LP Instructor via the accept-to-be-teacher action parameter...

8.1CVSS8AI score0.02816EPSS
Exploits5References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:23 a.m.4 views

CVE-2019-12962

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header...

6.1CVSS5.9AI score0.04052EPSS
Exploits4References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:26 a.m.4 views

CVE-2015-9416

The sitepress-multilingual-cms WPML plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header...

6.1CVSS6AI score0.0019EPSS
Exploits1References1
OSV
OSV
added 2025/05/20 4:15 p.m.0 views

UBUNTU-CVE-2025-37960

In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblockdoublearray When increasing the array size in memblockdoublearray and the slab is not yet available, a call to memblockfindinrange is used to reserve/allocate memory. Howeve...

5.5CVSS6.2AI score0.00065EPSS
Exploits0References25
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.2 views

PT-2025-25853

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free error in the Linux kernel's crypto subsystem has been resolved. The issue occurs when the accept2 function is called on a socket of type algif hash with the MSG MORE flag s...

7.8CVSS6.6AI score0.00078EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/09 3:24 p.m.7 views

CVE-2025-47517

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Stored XSS.This issue affects Accept Donations with PayPal & Stripe: from n/a through = 1.4.5...

7.1CVSS7.2AI score0.0008EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/05/09 4:55 a.m.1 views

SUSE CVE-2022-49791

In the Linux kernel, the following vulnerability has been resolved: iouring: fix multishot accept request leaks Having REQFPOLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it...

5.5CVSS6.7AI score0.00074EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/05/09 12:0 a.m.0 views

PT-2025-22221

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12 Description A vulnerability in the Linux kernel has been resolved. The issue occurs in the memblock double array function when increasing the array size and the slab is not yet available. A call to memblock...

5.5CVSS6.7AI score0.00065EPSS
Exploits0
NVD
NVD
added 2025/05/07 3:16 p.m.4 views

CVE-2025-47517

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Stored XSS.This issue affects Accept Donations with PayPal & Stripe: from n/a through = 1.4.5...

7.1CVSS0.0008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 2:20 p.m.7 views

CVE-2025-47517 WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Accept Donations with PayPal allows Stored XSS. This issue affects Accept Donations with PayPal: from n/a through 1.4.5...

7.1CVSS6.8AI score0.0008EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/07 2:20 p.m.11 views

CVE-2025-47517 WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Stored XSS.This issue affects Accept Donations with PayPal & Stripe: from n/a through = 1.4.5...

7.1CVSS0.0008EPSS
Exploits0References1
CVE
CVE
added 2025/05/07 2:20 p.m.43 views

CVE-2025-47517

CVE-2025-47517 describes a CSRF to Stored XSS vulnerability in the WordPress plugin Accept Donations with PayPal, affecting versions up to 1.4.5. The issue requires user interaction and the attacker may trigger a stored XSS via a CSRF, as indicated by CVSS vectors (UI:R, AV:N, AC:L, PR:N, S:C, C:...

7.1CVSS7.2AI score0.0008EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/05/01 3:16 p.m.1 views

DEBIAN-CVE-2022-49791

In the Linux kernel, the following vulnerability has been resolved: iouring: fix multishot accept request leaks Having REQFPOLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it...

5.5CVSS5.5AI score0.00074EPSS
Exploits0References1
OSV
OSV
added 2025/05/01 3:16 p.m.0 views

UBUNTU-CVE-2022-49791

In the Linux kernel, the following vulnerability has been resolved: iouring: fix multishot accept request leaks Having REQFPOLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it...

5.5CVSS5.8AI score0.00074EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/05/01 2:9 p.m.9 views

CVE-2022-49791 io_uring: fix multishot accept request leaks

In the Linux kernel, the following vulnerability has been resolved: iouring: fix multishot accept request leaks Having REQFPOLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it...

0.00074EPSS
Exploits0References2
CVE
CVE
added 2025/05/01 2:9 p.m.47 views

CVE-2022-49791

The CVE-2022-49791 entry is about a Linux kernel issue in io_uring where a multishot accept request can leak if REQ_F_POLLED is set and the code misclassifies the operation as multishot from the polling path. The problem could lead to leaking the request by a skip-completion path, and the remedia...

5.5CVSS6.8AI score0.00074EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2025/05/01 2:9 p.m.4 views

CVE-2022-49791

In the Linux kernel, the following vulnerability has been resolved: iouring: fix multishot accept request leaks Having REQFPOLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it...

5.5CVSS5.5AI score0.00074EPSS
Exploits0
Rows per page
Query Builder