Lucene search
+L

660 matches found

Code423n4
Code423n4
•added 2023/10/30 12:00 a.m.•19 views

Minter can censor GATEKEEPER and mint uncollateralized for a prolonged period of time

Lines of code Vulnerability details Impact Ethena explicitly mentions their protection against a compromised minter, the mentioned maximum loss is $100.000. The protection against a compromised minter rests on the GATEKEEPER role which is a system running on AWS set to remove the minter if mints...

7.2AI score
SaveExploits0
Fedora
Fedora
•added 2023/10/24 1:23 a.m.•56 views

[SECURITY] Fedora 38 Update: folly-2023.10.16.00-1.fc38

Folly acronymed loosely after Facebook Open Source Library is a library of C++14 components designed with practicality and efficiency in mind. Folly contains a variety of core library components used extensively at Facebook. In particular, it's often a dependency of Facebook's other open source C...

7.5CVSS8.6AI score0.99999EPSS
SaveExploits21
Vulnrichment
Vulnrichment
•added 2023/10/19 1:53 a.m.•12 views

CVE-2023-5638 Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wcjimage' shortcode in versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

6.4CVSS6.8AI score0.00478EPSS
SaveExploits0References4
OSV
OSV
•added 2023/10/14 2:15 a.m.•16 views

AZL-31294 CVE-2023-45853 affecting package boost for versions less than 1.76.0-4

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

9.8CVSS7.1AI score0.03179EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/06 1:15 p.m.•14 views

CVE-2023-25033

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

8.8CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/06 1:15 p.m.•24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

6.8CVSS8.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/06 12:49 p.m.•16 views

CVE-2023-25033 WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

5.4CVSS7.4AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/06 12:49 p.m.•36 views

CVE-2023-25033 WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

5.4CVSS9AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/06 12:49 p.m.•84 views

CVE-2023-25033

CVE-2023-25033 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Social Share Boost (also referred to as Sumo Social Share Boost) for versions 4.5 or apply vendor advisories as available in the provided sources.

8.8CVSS7AI score0.00248EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/06 12:00 a.m.•19 views

PT-2023-19884 · WordPress · Sumo Social Share Boost

Name of the Vulnerable Software and Affected Versions: Sumo Social Share Boost plugin versions = 4.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

8.8CVSS8.8AI score0.00248EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/06 12:00 a.m.•4 views

CVE-2023-25033: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

8.8CVSS8.1AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/06 12:00 a.m.•21 views

WordPress Plugin social-share-boost Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2023/09/12 11:07 a.m.•49 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

9.3CVSS7.1AI score0.45589EPSS
SaveExploits7References11
OSV
OSV
•added 2023/09/12 12:00 a.m.•62 views

ALSA-2023:5069 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel 5.14.0. Security Fixes: kernel: UAF in nftables when nftsetlookupglobal triggered after handling named and anonymous sets in batch...

7.8CVSS7.1AI score0.05188EPSS
SaveExploits6References22
Openbugbounty
Openbugbounty
•added 2023/09/05 11:32 p.m.•9 views

pc-boost.com Cross Site Scripting vulnerability OBB-3650914

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
NVD
NVD
•added 2023/09/01 11:15 a.m.•31 views

CVE-2023-25044

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/01 11:15 a.m.•15 views

CVE-2023-25044

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/01 10:51 a.m.•20 views

CVE-2023-25044 WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/01 10:51 a.m.•71 views

CVE-2023-25044

CVE-2023-25044 affects the WordPress plugin Sumo Social Share Boost (versions

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/01 10:51 a.m.•34 views

CVE-2023-25044 WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sumo Social Share Boost plugin = 4.4 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder