Lucene search
+L

485 matches found

NVD
NVD
added 2023/05/03 12:16 p.m.49 views

CVE-2023-25796

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Include WP BaiDu Submit plugin = 1.2.1 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/03 12:16 p.m.9 views

CVE-2023-25796

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Include WP BaiDu Submit plugin = 1.2.1 versions...

4.8CVSS6.6AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/03 11:08 a.m.9 views

CVE-2023-25796 WordPress WP BaiDu Submit Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Include WP BaiDu Submit plugin = 1.2.1 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/03 11:08 a.m.64 views

CVE-2023-25796

CVE-2023-25796 is a stored XSS in the WordPress plugin WP BaiDu Submit (

5.9CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/03 12:00 a.m.22 views

WordPress plugin WP BaiDu Submit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/13 11:15 p.m.28 views

CVE-2023-30637

Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomicserver. NOTE: installations with brpc-0.14.0 and later are unaffected...

7.5CVSS7.5AI score0.00732EPSS
SaveExploits1References1
Prion
Prion
added 2023/04/13 11:15 p.m.24 views

Memory corruption

Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomicserver. NOTE: installations with brpc-0.14.0 and later are unaffected...

5CVSS7.5AI score0.00732EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/04/13 12:00 a.m.42 views

CVE-2023-30637

Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomicserver. NOTE: installations with brpc-0.14.0 and later are unaffected...

7.6AI score0.00732EPSS
SaveExploits1References1
CVE
CVE
added 2023/04/13 12:00 a.m.314 views

CVE-2023-30637

Baidu braft 1.1.2 has a memory leak in example/atomic/atomic_server related to the use of the new operator. The CVSS data indicates a high impact on availability with no confidentiality/integrity impact (Network attack, no user interaction, low complexity, no privileges). The vulnerability is not...

7.5CVSS7.4AI score0.00732EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2023/04/13 12:00 a.m.19 views

CVE-2023-30637

Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomicserver. NOTE: installations with brpc-0.14.0 and later are unaffected...

7.5CVSS7AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/04/13 12:00 a.m.15 views

CVE-2023-30637

Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomicserver. NOTE: installations with brpc-0.14.0 and later are unaffected...

6.8AI score0.00732EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/04/13 12:00 a.m.10 views

Baidu braft 安全漏洞

Baidu braft is an industrial-grade C++ implementation of the RAFT consensus algorithm and brpc-based replicated state machine from the Chinese company Baidu. A security vulnerability exists in Baidu braft version 1.1.2 due to a memory leak in example/atomic/atomicserver using the new operator...

7.5CVSS7.3AI score0.00732EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2023/02/24 12:00 a.m.16 views

WordPress 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 Plugin <= 4.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 Type Plugin Vulnerable versions = 4.2.7 Fixed in 4.2.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-26531 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID...

8.8CVSS7AI score0.00301EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2023/02/15 12:00 a.m.19 views

WP BaiDu Submit <= 1.2.1 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS4.8AI score0.00369EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2023/02/15 12:00 a.m.15 views

WordPress WP BaiDu Submit Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software WP BaiDu Submit Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25796 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 398acf73120d Credits Rio Darmawan Required...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/12/22 12:00 a.m.13 views

Baidu Netdisk 代码问题漏洞

Baidu Netdisk 百度网盘 is a personal cloud storage service software from the Chinese company Baidu. A security vulnerability exists in Baidu Netdisk 7.4.3 and earlier versions, which stems from an untrusted search path vulnerability that allows an attacker to gain privileges via a Trojan horse DLL in...

6.7CVSS6.7AI score0.0032EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2022/09/16 9:04 p.m.32 views

TensorFlow vulnerable to OOB write in `scatter_nd` in TF Lite

Impact The ScatterNd function takes an input argument that determines the indices of of the output tensor. An input index greater than the output tensor or less than zero will either write content at the wrong index or trigger a crash. Patches We have patched the issue in GitHub commit...

9.8CVSS9AI score0.00467EPSS
SaveExploits0References6Affected Software3
Github Security Blog
Github Security Blog
added 2022/09/16 9:04 p.m.35 views

TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

Impact The GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered. Patches We have patched the issue in GitHub commit...

9.1CVSS8.8AI score0.00467EPSS
SaveExploits0References6Affected Software3
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31504

The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01432EPSS
SaveExploits1References3
OSV
OSV
added 2022/07/11 1:15 a.m.10 views

CVE-2022-31504

The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01432EPSS
SaveExploits1References2
Rows per page
Query Builder