Lucene search
K

2434 matches found

CNNVD
CNNVD
added 2023/01/02 12:0 a.m.4 views

WordPress plugin WordPress Filter Gallery Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS5AI score0.00226EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2023/01/02 12:0 a.m.3 views

PT-2023-13697 · WordPress · Iubenda Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: iubenda WordPress plugin versions prior to 3.3.3 Description: The issue affects the iubenda WordPress plugin, where a lack of authorization and CSRF protection in an AJAX action, combined with insufficient validation of options to be updated,...

8.8CVSS6.7AI score0.00208EPSS
Exploits2References6
CNNVD
CNNVD
added 2022/12/26 12:0 a.m.1 views

WordPress Plugin IWS SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

9.8CVSS8.5AI score0.60813EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/12/23 12:0 a.m.4 views

userver 安全漏洞

userver is a modern open source asynchronous framework from userver open source. Used to create C++ microservices, services and utilities quickly and comfortably. A security vulnerability exists in userver that stems from the fact that it allows an attacker to implement a denial of service via a...

7.5CVSS7.3AI score0.00908EPSS
Exploits0References3
OSV
OSV
added 2022/12/22 9:15 p.m.3 views

CVE-2022-3794

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make additional changes to the site, as the plugin does not...

4.3CVSS5.8AI score0.00177EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/12/22 12:0 a.m.2 views

WordPress plugin Jeg Elementor Kit 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. iframe is an inline frame used to embed another document into the current HTML document.Elementor is a website builder that allows WordPress users to crea...

5.4CVSS5.1AI score0.00177EPSS
Exploits1References4
OSV
OSV
added 2022/12/12 6:15 p.m.2 views

CVE-2022-3912

The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example...

7.5CVSS5.8AI score0.0048EPSS
Exploits2References1
OSV
OSV
added 2022/12/12 6:15 p.m.2 views

CVE-2022-3921

The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files and lead to RCE...

9.8CVSS5.8AI score0.07847EPSS
Exploits2References1
UbuntuCve
UbuntuCve
added 2022/12/12 6:15 p.m.42 views

CVE-2022-41881

Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except...

7.5CVSS6.8AI score0.00472EPSS
Exploits1References3
Prion
Prion
added 2022/12/12 6:15 p.m.31 views

Design/Logic Flaw

Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except...

5CVSS7.3AI score0.00472EPSS
Exploits1References4Affected Software2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.5 views

WordPress plugin Car Dealer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.3AI score0.0014EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.3 views

WordPress plugin WPTools 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.7CVSS5.7AI score0.00076EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.1 views

WordPress theme Listingo 代码问题漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. A code issue vulnerability exists in WordPress theme Listingo versions prior to 3.2.7 that stems from not...

9.8CVSS8.3AI score0.07847EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.4 views

WordPress plugin StopBadBots 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.3AI score0.00128EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.4 views

WordPress plugin WP Memory 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS6.3AI score0.0014EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.1 views

WordPress plugin Welcart e-Commerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.3AI score0.00157EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.3 views

WordPress plugin User Registration 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

7.5CVSS7.4AI score0.0048EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.5 views

WordPress plugin AntiHacker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS6.3AI score0.00172EPSS
Exploits2References2
RedHat Linux
RedHat Linux
added 2022/12/07 8:19 a.m.43 views

Moderate: Red Hat Security Advisory: Red Hat AMQ Broker 7.10.2 release and security update

Red Hat AMQ Broker 7.10.2 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.8CVSS7AI score0.94251EPSS
Exploits46References10
CNNVD
CNNVD
added 2022/11/29 12:0 a.m.2 views

WordPress plugin TeraWallet 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An insecure direct object...

4.3CVSS6.8AI score0.00126EPSS
Exploits0References3
Rows per page
Query Builder