Lucene search
K

33 matches found

Vulnrichment
Vulnrichment
added 2024/12/04 7:32 a.m.7 views

CVE-2024-10664 Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update

The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepressdbpostsupdate function in all versions up to, and including, 2.16.3.3. This makes it possible for authenticated...

4.3CVSS6.7AI score0.00122EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/06 12:0 a.m.4 views

WordPress plugin Catch Base 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.1CVSS6.1AI score0.00132EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/01 12:0 a.m.2 views

PT-2024-39146 · WordPress · The Kb Support – Wordpress Help Desk/Knowledge Base

Name of the Vulnerable Software and Affected Versions: The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress versions up to, and including, 1.6.6 Description: The issue allows unauthorized access and modification of data due to a missing capability check on the kbs ajax loa...

6.5CVSS7.2AI score0.00415EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2024/04/29 10:14 a.m.12 views

CVE-2024-33590 WordPress basepress plugin <= 2.16.1 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in codeSavory Knowledge Base documentation & wiki plugin – BasePress.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through 2.16.1...

5CVSS7AI score0.0022EPSS
Exploits0References1
Redos
Redos
added 2023/09/18 12:0 a.m.24 views

ROS-20230915-11

A vulnerability in the Base plugin gst-plugins-base of the Gstreamer multimedia framework is related to a buffer overrun during the parsing and decoding of subtitles from SRT files. operation outside the memory buffer when parsing and decoding subtitles from SRT files. Exploitation exploitation o...

8.8CVSS7.3AI score0.063EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/08/02 12:0 a.m.2 views

The vulnerability of the Base plugin (gst-plugins-base) in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of the Base plugin gst-plugins-base of the Gstreamer multimedia framework is related to the issue where operations occur outside the buffer boundaries in memory during the parsing and decoding of SRT subtitle files. Exploiting this vulnerability allows a remote attacker to execu...

10CVSS7.4AI score0.063EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.1 views

The vulnerability of the Base plugin (gst-plugins-base) in the Gstreamer multimedia framework allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Base plugin gst-plugins-base in the Gstreamer multimedia framework is related to insufficient protection of service data due to the lack of security updates on the remote host. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

7.8CVSS5.9AI score
Exploits0References3Affected Software2
Positive Technologies
Positive Technologies
added 2023/07/02 12:0 a.m.3 views

PT-2023-36410 · Gnu +1 · Debian +1

Уязвимость плагина Base gst-plugins-base мультимедийного фреймворка Gstreamer связана с недостаточной защитой служебных данных в результате отсутствия на удаленном хосте обновлений безопасности. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой...

7.2CVSS7.2AI score
Exploits0References4
CNVD
CNVD
added 2022/05/24 12:0 a.m.14 views

WordPress Remove CPT base plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress Remove CPT base plugin has a cross-site request forgery vulnerability, which stems from the fact that the WEB application does not...

5.8CVSS2.1AI score0.00093EPSS
Exploits0References1
OSV
OSV
added 2022/05/20 9:15 p.m.1 views

CVE-2022-29431

Cross-Site Request Forgery CSRF vulnerability in KubiQ CPT base plugin = 5.8 at WordPress allows an attacker to delete the CPT base...

5.4CVSS5.8AI score0.00093EPSS
Exploits0References2
Prion
Prion
added 2022/05/20 9:15 p.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in KubiQ CPT base plugin = 5.8 at WordPress allows an attacker to delete the CPT base...

5.8CVSS5.5AI score0.00093EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/05/20 8:47 p.m.11 views

CVE-2022-29431 Remove CPT base <= 5.8 - CSRF leads to CPT base deletion

Cross-Site Request Forgery CSRF vulnerability in KubiQ CPT base plugin = 5.8 at WordPress allows an attacker to delete the CPT base...

5.4CVSS5.8AI score0.00093EPSS
Exploits0References2
CVE
CVE
added 2022/05/20 8:47 p.m.84 views

CVE-2022-29431

CVE-2022-29431 concerns the WordPress Remove CPT base plugin (versions

5.8CVSS5.5AI score0.00093EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder