Lucene search
+L

3713 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.8 views

The vulnerability of the search_nested_keyrings() function in the security/keys/keyring.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the searchnestedkeyrings function in the security/keys/keyring.c module of the Linux kernel involves accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

7.1CVSS6.7AI score0.00282EPSS
SaveExploits0References30Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.12 views

The vulnerability of the `nvmet_setup_dhgroup()` function in the `drivers/nvme/target/auth.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmetsetupdhgroup function in the drivers/nvme/target/auth.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

7.8CVSS6.9AI score0.00629EPSS
SaveExploits0References21Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.12 views

The vulnerability of the bcm_release() function in the net/can/bcm.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bcmrelease function in the net/can/bcm.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.8CVSS6.5AI score0.00286EPSS
SaveExploits0References25Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.15 views

The vulnerability of the git-upload-pack method of the go-git library allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the git-upload-pack method in the go-git library is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.9AI score0.01287EPSS
SaveExploits0References5Affected Software10
CVE
CVE
added 2025/01/11 2:08 p.m.176 views

CVE-2024-57809

Technical details about CVE-2024-57809 are not provided in the supplied documents. No affected products/versions or remediation steps are present. Monitor for vendor advisories for confirmation of impact and fixes.

5.5CVSS6.5AI score0.00215EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/01/07 11:15 a.m.6 views

CVE-2024-49644

Incorrect Privilege Assignment vulnerability in AllAccessible Accessibility by AllAccessible allaccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through = 1.3.4...

8.8CVSS0.00406EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:49 a.m.5 views

CVE-2024-49644 WordPress Accessibility by AllAccessible plugin <= 1.3.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in AllAccessible Team Accessibility by AllAccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through 1.3.4...

8.8CVSS7AI score0.00406EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 4:22 a.m.1 views

CVE-2024-9208 Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting

The Enable Accessibility plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. This makes it possible for unauthenticated attackers to inject arbitrar...

6.1CVSS5.7AI score0.00291EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/07 4:22 a.m.56 views

CVE-2024-9208

The CVE-2024-9208 issue affects the WordPress Enable Accessibility plugin (versions up to and including 1.4.1). It describes a Reflected Cross-Site Scripting vulnerability caused by insufficient escaping when using add_query_arg and remove_query_arg in the URL, enabling unauthenticated attackers ...

6.1CVSS6.1AI score0.00291EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/07 4:22 a.m.31 views

CVE-2024-9208 Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting

The Enable Accessibility plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. This makes it possible for unauthenticated attackers to inject arbitrar...

6.1CVSS0.00291EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.7 views

WordPress plugin Accessibility by AllAccessible 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS8.1AI score0.00406EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/07 12:00 a.m.10 views

PT-2025-3712 · WordPress · Enable Accessibility

Name of the Vulnerable Software and Affected Versions: Enable Accessibility plugin for WordPress versions up to, and including, 1.4.1 Description: The issue arises from the use of add query arg and remove query arg without proper escaping on the URL, allowing unauthenticated attackers to inject...

6.1CVSS6.7AI score0.00291EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.9 views

WordPress plugin Enable Accessibility 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Enable Accessibility version 1.4.1 and previous versions of the existence of cross-site...

6.1CVSS6.7AI score0.00291EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/06 4:54 p.m.6 views

WordPress Enable Accessibility plugin <= 1.4.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Enable Accessibility versions = 1.4.1...

6.1CVSS6.3AI score0.00291EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/01/03 11:57 a.m.5 views

WordPress Accessibility by AllAccessible plugin <= 1.3.4 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Accessibility by AllAccessible versions = 1.3.4...

8.8CVSS7AI score0.00406EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:00 a.m.8 views

The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

6.4CVSS7.6AI score0.0019EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/18 12:00 a.m.10 views

The vulnerability of Veeam Backup & Replication’s virtual and physical systems arises from the limited ability to restrict the path name to the restricted access directory. This allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of Veeam Backup & Replication virtual and physical systems is related to the limited ability to access the directory. Exploiting this vulnerability can allow a malicious actor to influence the integrity and accessibility of the protected information...

8.5CVSS7.4AI score0.00829EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/12/13 3:15 p.m.40 views

CVE-2023-41869

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.4...

4.3CVSS0.00408EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.12 views

CVE-2023-41869 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH wp-accessibility-helper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper WAH: from n/a through = 0.6.2.4...

4.3CVSS7.3AI score0.00408EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.4 views

WordPress plugin WP Accessibility Helper 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS8.5AI score0.00408EPSS
SaveExploits0References1
Rows per page
Query Builder