Lucene search
+L

2533 matches found

CNNVD
CNNVD
added 2025/01/06 12:0 a.m.7 views

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1, which stems from vulnerability to false access control attacks, leading to a log...

9.1CVSS6.8AI score0.00902EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/01/06 12:0 a.m.16 views

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

7AI score0.00902EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/01/06 12:0 a.m.36 views

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

0.00902EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/01/03 2:32 p.m.13 views

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes versions = 1.4.9...

7.6CVSS8.1AI score0.00732EPSS
SaveExploits1Affected Software1
The Hacker News
The Hacker News
added 2024/12/31 11:26 a.m.11 views

New U.S. DoJ Rule Halts Bulk Data Transfers to Adversarial Nations to Protect Privacy

The U.S. Department of Justice DoJ has issued a final rule carrying out Executive Order EO 14117, which prevents mass transfer of citizens' personal data to countries of concern such as China including Hong Kong and Macau, Cuba, Iran, North Korea, Russia, and Venezuela. "This final rule is a...

6.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/12/29 3:48 a.m.5 views

SUSE CVE-2024-56684

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdqgetclocks It should be size of the struct clkbulkdata, not data pointer pass to devmkcalloc...

6.1CVSS7.8AI score0.00218EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/28 10:15 a.m.9 views

UBUNTU-CVE-2024-56684

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdqgetclocks It should be size of the struct clkbulkdata, not data pointer pass to devmkcalloc...

8.4CVSS6.2AI score0.00218EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/12/20 12:0 a.m.10 views

PT-2024-12267 · Unknown · Airvantage

Name of the Vulnerable Software and Affected Versions: AirVantage affected versions not specified Description: The AirVantage online Warranty Checker tool has a vulnerability that could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pairs. The issue arises when using the...

5.3CVSS6.6AI score0.00366EPSS
SaveExploits0References6
NVD
NVD
added 2024/12/13 3:15 p.m.11 views

CVE-2024-54236

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through = 1.4.5...

7.1CVSS0.00418EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/13 3:15 p.m.9 views

CVE-2023-41688

Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5...

5.4CVSS0.00461EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.9 views

CVE-2024-54236 WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through = 1.4.5...

7.1CVSS8.6AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.23 views

CVE-2023-41688 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5...

5.4CVSS0.00461EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.7 views

PT-2024-12956 · Mad Fish Digital · Bulk Noindex & Nofollow Toolkit

Name of the Vulnerable Software and Affected Versions: Mad Fish Digital Bulk NoIndex & NoFollow Toolkit versions 1.42 and earlier Bulk NoIndex & NoFollow Toolkit plugin version 1.42 Description: The issue affects the Bulk NoIndex & NoFollow Toolkit plugin due to a Missing Authorization...

5.4CVSS9.6AI score0.00461EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.5 views

WordPress plugin Ni WooCommerce Bulk Product Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00418EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/12 5:54 p.m.6 views

WordPress Seraphinite Bulk Discounts for WooCommerce plugin <= 2.4.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Seraphinite Bulk Discounts for WooCommerce versions = 2.4.6...

6.1CVSS6.3AI score0.0038EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/12 8:22 a.m.32 views

CVE-2024-12160 Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting

The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.0038EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/12 8:22 a.m.55 views

CVE-2024-12160

CVE-2024-12160 affects the Seraphinite Bulk Discounts for WooCommerce plugin (WordPress). The issue is a reflected Cross-Site Scripting vulnerability caused by using add_query_arg without proper escaping in the URL for all versions up to 2.4.6. This allows unauthenticated attackers to inject arbi...

6.1CVSS6AI score0.0038EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/12 8:22 a.m.9 views

CVE-2024-12160 Seraphinite Bulk Discounts for WooCommerce <= 2.4.6 - Reflected Cross-Site Scripting

The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.4AI score0.0038EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.6 views

WordPress plugin Seraphinite Bulk Discounts for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS7.8AI score0.0038EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/09 1:15 p.m.10 views

CVE-2023-49754

Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through = 5.0.0...

4.3CVSS0.00396EPSS
SaveExploits0References1
Rows per page
Query Builder