Lucene search
+L

5224 matches found

NVD
NVD
added 2025/02/04 8:15 a.m.11 views

CVE-2024-13514

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.5 via the 'bsb-slider' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, wi...

4.3CVSS0.0034EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/04 7:21 a.m.9 views

CVE-2024-13514 B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.5 via the 'bsb-slider' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, wi...

4.3CVSS6.6AI score0.0034EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/04 7:21 a.m.39 views

CVE-2024-13514 B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.5 via the 'bsb-slider' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, wi...

4.3CVSS0.0034EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/04 7:21 a.m.61 views

CVE-2024-13514

CVE-2024-13514 concerns the WordPress plugin B Slider- Gutenberg Slider Block for WP. The CVE describes Information Exposure via the bsb-slider shortcode, enabling authenticated users with Contributor+ privileges to read private posts. Reported affected versions include up to 1.9.5 (per the CVE r...

4.3CVSS4.4AI score0.0034EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/04 12:00 a.m.14 views

PT-2025-2200 · WordPress · B Slider- Gutenberg Slider Block

Name of the Vulnerable Software and Affected Versions: The B Slider- Gutenberg Slider Block for WP plugin for WordPress versions up to, and including, 1.9.5 Description: The issue allows authenticated attackers with Contributor-level access and above to extract data from private posts they should...

4.3CVSS9.4AI score0.0034EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/02/04 12:00 a.m.10 views

WordPress plugin B Slider- Gutenberg Slider Block for WP 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin B...

4.3CVSS8.4AI score0.0034EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/02/03 10:28 p.m.11 views

WordPress B Slider- Gutenberg Slider Block for WP plugin <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode vulnerability

Authenticated Contributor+ Private Post Disclosure via bsb-slider Shortcode vulnerability discovered by Nishiv in WordPress Plugin B Slider versions = 1.1.23...

4.3CVSS7AI score0.0034EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:00 a.m.10 views

The vulnerability of component B/A of the IBM Storage Protect (formerly IBM Spectrum Protect) software data protection platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of component B/A of the IBM Storage Protect formerly IBM Spectrum Protect software data protection platform lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

5.9CVSS5.4AI score0.00228EPSS
SaveExploits0References3Affected Software2
Circl
Circl
added 2025/01/31 12:12 a.m.9 views

CVE-2024-23937

creationtimestamp| type| source ---|---|--- 2025-01-31 00:12:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113920073751259305 2025-01-31 00:17:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgypv5knv42t 2025-01-31 00:17:46+00:00| seen|...

4.3CVSS5.4AI score0.00379EPSS
SaveExploits0References8
Circl
Circl
added 2025/01/27 3:17 p.m.27 views

CVE-2025-24741

creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqadcpcyu2e 2025-01-27 17:40:36+00:00| seen| https://t.me/cvedetector/16479 2025-02-14 09:47:01+00:00| seen|...

6.1CVSS8.7AI score0.00241EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/15 4:15 p.m.11 views

CVE-2024-8603

A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices...

8.2CVSS0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/15 3:31 p.m.21 views

CVE-2024-8603

A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices...

8.2CVSS0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/15 3:31 p.m.6 views

CVE-2024-8603

A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices...

8.2CVSS7.2AI score0.00337EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/15 3:31 p.m.52 views

CVE-2024-8603

CVE-2024-8603 affects B&R Automation Runtime and B&R mapp View versions prior to 6.1, where the SSL/TLS component uses a broken or risky cryptographic algorithm. Unauthenticated network-based attackers may masquerade as services on impacted devices. Multiple sources (NVD/NCSA advisory references ...

8.2CVSS7AI score0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.7 views

PT-2025-2748 · Fortinet · Fortisase +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.4.4 and below FortiOS versions 7.2.10 and below FortiSASE version 23.4.b Description: The issue is related to an Integer Overflow or Wraparound vulnerability. This vulnerability may allow an authenticated attacker to crash...

6.8CVSS6.7AI score0.006EPSS
SaveExploits0References8
HPE Security Bulletins
HPE Security Bulletins
added 2025/01/06 12:00 a.m.11 views

HPESBST04758 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Elevation of Privilege, Escalation of Privilege; Remote: Arbitrary Command Execution, Authentication Bypass, Creation and Deletion of Arbitrary Files, Denial of Service DoS, Gain Privileged Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP...

8.5CVSS6.6AI score0.28058EPSS
SaveExploits18
Circl
Circl
added 2024/12/27 3:17 p.m.14 views

CVE-2024-56589

creationtimestamp| type| source ---|---|--- 2024-12-27 15:17:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbuo7qyu25 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07 2025-12-03 14:14:49+00:00| seen|...

5.5CVSS6.8AI score0.00235EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2024/12/18 4:03 p.m.166 views

Exploit for CVE-2024-57521

Authenticated SQL Injection in RuoYi v4.7.9 Bypass of CVE-202...

10CVSS8.4AI score0.00668EPSS
SaveExploits4
CVE
CVE
added 2024/12/13 2:25 p.m.40 views

CVE-2024-54334

CVE-2024-54334 affects the Quran Phrases About Most People Shortcodes WordPress plugin. Connected data confirm a DOM-Based XSS in Quran Phrases About Most People Shortcodes, affecting version range from n/a up to 1.4. Wordfence vulnerability details note the issue is Mitigated by patches in the 1...

6.5CVSS7.2AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.13 views

Image Access Scan2Net 安全漏洞

Image Access Scan2Net is a scanning software from Image Access Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which stems from a password change feature that does not require a current or old password, which...

8.4CVSS6.8AI score0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder