Lucene search
+L

10005 matches found

OSV
OSV
added 2021/06/14 2:15 p.m.8 views

CVE-2021-24356

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activateplugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites...

8.8CVSS7.4AI score0.02997EPSS
SaveExploits3References2
NVD
NVD
added 2021/06/14 2:15 p.m.27 views

CVE-2021-24352

The exportdata function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects...

8.8CVSS0.01175EPSS
SaveExploits2References2
NVD
NVD
added 2021/06/14 2:15 p.m.25 views

CVE-2021-24354

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites...

8.8CVSS0.0148EPSS
SaveExploits2References2
OSV
OSV
added 2021/06/14 2:15 p.m.5 views

CVE-2021-24352

The exportdata function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects...

8.8CVSS7.3AI score0.01175EPSS
SaveExploits2References2
OSV
OSV
added 2021/06/14 2:15 p.m.9 views

CVE-2021-24354

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites...

8.8CVSS5.9AI score0.0148EPSS
SaveExploits2References2
NVD
NVD
added 2021/06/14 2:15 p.m.26 views

CVE-2021-24355

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/getwildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the...

4.3CVSS0.0072EPSS
SaveExploits2References2
Prion
Prion
added 2021/06/14 2:15 p.m.28 views

Design/Logic Flaw

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/getwildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the...

4CVSS4.6AI score0.0072EPSS
SaveExploits2References2Affected Software1
Prion
Prion
added 2021/06/14 2:15 p.m.21 views

Design/Logic Flaw

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites...

6.5CVSS8.5AI score0.0148EPSS
SaveExploits2References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/06/14 2:15 p.m.3 views

CVE-2021-24354

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites...

8.8CVSS7.3AI score0.0148EPSS
SaveExploits2References3
Prion
Prion
added 2021/06/14 2:15 p.m.21 views

Design/Logic Flaw

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activateplugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites...

6.5CVSS8.6AI score0.02997EPSS
SaveExploits3References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/06/14 2:15 p.m.4 views

CVE-2021-24355

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/getwildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the...

4.3CVSS5.9AI score0.0072EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2021/06/14 1:37 p.m.26 views

CVE-2021-24355 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard Value

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/getwildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the...

5.8AI score0.0072EPSS
SaveExploits2References2
CVE
CVE
added 2021/06/14 1:37 p.m.69 views

CVE-2021-24354

CVE-2021-24354 affects the WordPress plugin Simple 301 Redirects by BetterLinks up to version 2.0.3. The root cause is a lack of capability checks and an insufficient nonce check on the plugin’s AJAX action, enabling an authenticated user to install arbitrary plugins on vulnerable sites. The issu...

8.8CVSS8.6AI score0.0148EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/06/14 12:0 a.m.9 views

PT-2021-15891 · Betterlinks · Simple 301 Redirects By Betterlinks

Name of the Vulnerable Software and Affected Versions: Simple 301 Redirects by BetterLinks WordPress plugin versions prior to 2.0.4 Description: The issue is related to the lack of capability checks and insufficient nonce check on the AJAX actions, specifically "simple301redirects/admin/get...

4.3CVSS4.3AI score0.0072EPSS
SaveExploits2References7
Positive Technologies
Positive Technologies
added 2021/06/14 12:0 a.m.10 views

PT-2021-15892 · Betterlinks · Simple 301 Redirects

Name of the Vulnerable Software and Affected Versions: Simple 301 Redirects by BetterLinks WordPress plugin versions prior to 2.0.4 Description: The issue is related to a lack of capability checks and insufficient nonce check on the AJAX action "simple301redirects/admin/activate plugin". This mad...

8.8CVSS8.4AI score0.02997EPSS
SaveExploits3References6
OSV
OSV
added 2021/06/10 12:15 p.m.7 views

CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...

7.2CVSS5.8AI score0.00879EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/06/10 12:0 a.m.71 views

SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2021:1899-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1899-1 advisory. The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

8.8CVSS7.2AI score0.07604EPSS
SaveExploits6References69
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2016:3084-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02754EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2020:0547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS5AI score0.00317EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.16 views

The vulnerability of the Linux operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Linux operating system’s kernel is related to incorrect initialization of process identifiers. Exploiting this vulnerability can allow an attacker to increase their privileges...

4.5CVSS6.5AI score0.00225EPSS
SaveExploits0References24Affected Software6
Rows per page
Query Builder