Lucene search
+L

443 matches found

Patchstack
Patchstack
added 2024/03/19 12:0 a.m.21 views

WordPress Backup Bolt Plugin <= 1.3.0 is vulnerable to Sensitive Data Exposure

Software Backup Bolt Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.4.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7236 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID dd36f15c489e Credits Dmitrii Ignatyev Required...

6.5AI score0.0055EPSS
Exploits2References3Affected Software1
OSV
OSV
added 2024/03/18 7:15 p.m.4 views

CVE-2023-7236

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information...

4.7CVSS7.3AI score0.0055EPSS
Exploits2References1
NVD
NVD
added 2024/03/18 7:15 p.m.19 views

CVE-2023-7236

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information...

4.7CVSS6.1AI score0.0055EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2024/03/18 7:5 p.m.19 views

CVE-2023-7236 Backup Bolt <= 1.3.0 - Sensitive Data Exposure

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information...

6AI score0.0055EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/03/18 7:5 p.m.33 views

CVE-2023-7236 Backup Bolt <= 1.3.0 - Sensitive Data Exposure

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information...

6.3AI score0.0055EPSS
Exploits2References1
CVE
CVE
added 2024/03/18 7:5 p.m.94 views

CVE-2023-7236

Mode C: CVE-2023-7236 affects Backup Bolt WordPress Plugin versions

4.7CVSS9.1AI score0.0055EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2024/03/18 12:0 a.m.7 views

WordPress Plugin Backup Bolt Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.7CVSS6.1AI score0.0055EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2024/02/27 12:0 a.m.7 views

PT-2024-15242 · WordPress · Backup Bolt

Name of the Vulnerable Software and Affected Versions: Backup Bolt WordPress plugin versions 1.3.0 and earlier Description: The issue allows unauthenticated attackers to access debug logs, potentially exposing sensitive information such as system errors. This could lead to information exposure,...

4.7CVSS9.4AI score0.0055EPSS
Exploits2References7
WPVulnDB
WPVulnDB
added 2024/02/20 12:0 a.m.13 views

Backup Bolt < 1.4.0 - Sensitive Data Exposure

Description The plugin is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information. PoC Access the error lo...

9.2AI score0.0055EPSS
Exploits2References1Affected Software1
wpexploit
wpexploit
added 2024/02/20 12:0 a.m.153 views

Backup Bolt < 1.4.0 - Sensitive Data Exposure

Description The plugin is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information. Access the error log at...

9.3AI score0.0055EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.14 views

Fedora: Security Advisory for llvm-bolt (FEDORA-2023-67f0f8d186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00215EPSS
Exploits0References2
Fedora
Fedora
added 2023/11/03 6:54 p.m.19 views

[SECURITY] Fedora 39 Update: llvm-bolt-17.0.2-1.fc39

BOLT is a post-link optimizer developed to speed up large applications. It achieves the improvements by optimizing application's code layout based on execution profile gathered by sampling profiler, such as Linux perf tool...

5.5CVSS5.6AI score0.00215EPSS
Exploits0
Snyk
Snyk
added 2023/10/06 6:30 p.m.1 views

Improper Privilege Management

Overview bolt is a library enabling the execution of commands remotely over SSH and WinRM Affected versions of this package are vulnerable to Improper Privilege Management. An attacker can escalate their privileges by exploiting this vulnerability. Remediation Upgrade bolt to version 3.27.4 or...

9.8CVSS7.5AI score0.00374EPSS
Exploits0References2
OSV
OSV
added 2023/10/06 6:30 p.m.81 views

GHSA-289M-2964-F8Q5 Puppet Bolt privilege escalation vulnerability

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

9.8CVSS5.8AI score0.00409EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2023/10/06 6:30 p.m.35 views

Puppet Bolt privilege escalation vulnerability

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

9.8CVSS7AI score0.00374EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2023/10/06 6:15 p.m.14 views

CVE-2023-5214

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

9.8CVSS8.1AI score0.00374EPSS
Exploits0References1
Prion
Prion
added 2023/10/06 6:15 p.m.15 views

Path traversal

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

7.5CVSS9.5AI score0.00374EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/06 5:22 p.m.13 views

CVE-2023-5214 CVE-2023-5214 - Privilege Escalation in Puppet Bolt

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

6.5CVSS7.3AI score0.00374EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2023/10/06 5:22 p.m.23 views

CVE-2023-5214

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

9.8CVSS6.7AI score0.00374EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/10/06 5:22 p.m.20 views

CVE-2023-5214 CVE-2023-5214 - Privilege Escalation in Puppet Bolt

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...

6.5CVSS9.8AI score0.00374EPSS
Exploits0References1
Rows per page
Query Builder