Lucene search
K

3656 matches found

CNNVD
CNNVD
added 2024/03/13 12:0 a.m.3 views

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

6.1CVSS6AI score0.00472EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.3 views

PT-2024-22517 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is related to the /dede/article edit.php API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting...

6.1CVSS5.7AI score0.00472EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.3 views

PT-2024-22433 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article edit.php component. This allows for malicious requests to be made on behalf of the user. Recommendations: For DedeCMS version 5.7, as a...

8.8CVSS6.8AI score0.00347EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.3 views

PT-2024-22518 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The issue is related to the "/dede/article keywords main.php" API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround,...

6.1CVSS6.8AI score0.00237EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.3 views

PT-2024-22506 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article add.php component. This allows an attacker to perform unintended actions on the website. Recommendations: For DedeCMS version 5.7, as a...

8.8CVSS6.8AI score0.00323EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.2 views

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

6.1CVSS6.8AI score0.00237EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.1 views

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

8.8CVSS6.8AI score0.00323EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/03/13 12:0 a.m.11 views

CVE-2024-28665

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleadd.php...

8.9AI score0.00323EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.2 views

PT-2024-22519 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/article description main.php. This allows an attacker to perform unintended actions on the website. Recommendations: For...

6.3CVSS6.8AI score0.00233EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.4 views

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

8.8CVSS6.9AI score0.00347EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/03/13 12:0 a.m.21 views

CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...

7.4AI score0.00233EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.3 views

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

6.3CVSS6.8AI score0.00233EPSS
Exploits1References2
Microsoft Security Update
Microsoft Security Update
added 2024/03/12 5:0 p.m.34 views

2024-03 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5035857)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2024/03/12 5:0 p.m.19 views

2024-03 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5035857)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2024/03/12 5:0 p.m.18 views

2024-03 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5035855)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

7.2AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2024/03/12 5:0 p.m.84 views

2024-03 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5035855)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

7.2AI score
Exploits0
NVD
NVD
added 2024/03/07 12:15 p.m.14 views

CVE-2024-28229

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...

6.5CVSS6.5AI score0.0052EPSS
Exploits0References1
CVE
CVE
added 2024/03/07 11:39 a.m.73 views

CVE-2024-28229

CVE-2024-28229 affects JetBrains YouTrack prior to 2024.1.25893. The issue arises from insufficient authorization, allowing a user without appropriate permissions to restore issues and articles. Impact is limited to unauthorized restoration capability; no details about exploitation in the wild ar...

6.5CVSS6.5AI score0.0052EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/03/01 5:15 p.m.2 views

CVE-2024-27689

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...

8.8CVSS5.8AI score0.00316EPSS
Exploits1References1
Prion
Prion
added 2024/03/01 5:15 p.m.11 views

Cross site request forgery (csrf)

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...

8AI score0.00316EPSS
Exploits1References1
Rows per page
Query Builder