Lucene search
+L

3324 matches found

Positive Technologies
Positive Technologies
•added 2022/05/30 12:00 a.m.•4 views

PT-2022-14005

Name of the Vulnerable Software and Affected Versions Bulk Page Creator WordPress plugin versions prior to 1.1.4 Description The issue concerns the lack of nonce checks for page creation functionalities, making them susceptible to Cross-Site Request Forgery CSRF attacks. CSRF is a type of attack...

8.8CVSS0.00615EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/30 12:00 a.m.•4 views

CVE-2022-1611: Cross-Site Request Forgery (CSRF)

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...

8.8CVSS7.9AI score0.00615EPSS
SaveExploits1References2
OSV
OSV
•added 2022/05/25 5:15 p.m.•16 views

CVE-2021-27783

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...

6.5CVSS5.8AI score0.00372EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/25 5:15 p.m.•30 views

Code injection

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...

4CVSS6.4AI score0.00372EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2022/05/25 3:20 p.m.•44 views

CVE-2021-27783 HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...

6.8CVSS6.8AI score0.00372EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/25 3:20 p.m.•108 views

CVE-2021-27783

CVE-2021-27783 concerns HCL Technologies BigFix Mobile/Modern Client Management (versions v2.0 and v2.1). Affected component: PPKG files generated during user Bulk Enroll. Root cause: unencrypted sensitive information exposed within these PPKG files. Impact: information disclosure, enabling expos...

6.8CVSS6.4AI score0.00372EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
•added 2022/05/25 12:00 a.m.•4 views

PT-2022-9868

Name of the Vulnerable Software and Affected Versions Microsoft Intune affected versions not specified Description The issue concerns user-generated PPKG files for Bulk Enroll, which may expose unencrypted sensitive information. Recommendations At the moment, there is no information about a newer...

6.8CVSS0.00372EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/25 12:00 a.m.•8 views

CVE-2021-27783: Missing Encryption of Sensitive Data

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...

6.8CVSS6.7AI score0.00372EPSS
SaveExploits0References3
OSV
OSV
•added 2022/05/24 5:18 p.m.•51 views

GHSA-P7RM-GH9G-5FR8 Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...

5.4CVSS5.2AI score0.0054EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/05/24 5:18 p.m.•33 views

Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...

5.4CVSS6AI score0.0054EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2022/05/20 11:14 p.m.•68 views

CVE-2022-30596

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...

2.9AI score0.0091EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/05/19 12:00 a.m.•62 views

Cross-site Scripting in moodle

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...

5.4CVSS6.8AI score0.0091EPSS
SaveExploits0References9Affected Software1
attackerkb
attackerkb
•added 2022/05/19 12:00 a.m.•11 views

CVE-2021-27783

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...

6.8CVSS6.5AI score0.00372EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/05/18 5:15 p.m.•12 views

CVE-2022-30596

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...

5.4CVSS5.8AI score0.0091EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2022/05/18 5:15 p.m.•38 views

CVE-2022-30596

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...

5.4CVSS6.8AI score0.0091EPSS
SaveExploits0References4
OSV
OSV
•added 2022/05/18 5:15 p.m.•17 views

UBUNTU-CVE-2022-30596

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...

5.4CVSS6.8AI score0.0091EPSS
SaveExploits0References5
Mend
Mend
•added 2022/05/18 4:59 p.m.•2 views

CVE-2022-30596

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...

5.4CVSS0.0091EPSS
SaveExploits0References13
Cvelist
Cvelist
•added 2022/05/18 4:59 p.m.•59 views

CVE-2022-30596

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...

7.1AI score0.0091EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•4 views

CVE-2022-30596: Improper Neutralization of Input During Web Page Generation

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk...

5.4CVSS6.7AI score0.0091EPSS
SaveExploits0References3
HackRead
HackRead
•added 2022/05/17 10:21 a.m.•16 views

Facebook to Terminate some Location Tracking Services and Features

By Deeba Ahmed The social network giant plans the years most extensive bulk data deletion, including wiping out users location histories.… This is a post from HackRead.com Read the original post: Facebook to Terminate some Location Tracking Services and Features...

3.5AI score
SaveExploits0
Rows per page
Query Builder