Lucene search
+L

1663 matches found

CNNVD
CNNVD
added 2026/03/13 12:00 a.m.14 views

WordPress plugin Gift Up Gift Cards for WordPress and WooCommerce 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.4CVSS5.9AI score0.00168EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/11 6:30 p.m.15 views

EUVD-2026-11224

A vulnerability in the handling of an Egress Packet Network Interface EPNI Aligner interrupt in Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series with NC57 line cards and Cisco NCS 5700 Routers and Cisco IOS XR Software for Third Party Software could allow an...

6.8CVSS5.8AI score0.00318EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/07 1:44 a.m.7 views

CVE-2026-28443

OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /projectId/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0...

9.8CVSS5.8AI score0.00341EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/05 9:16 p.m.18 views

CVE-2026-28443

OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /projectId/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0...

9.8CVSS0.00341EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/03/05 8:53 p.m.13 views

CVE-2026-28443 OpenReplay: SQL injection in cards/search via unvalidated sort field parameter

OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /projectId/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0...

6.9CVSS5.8AI score0.00341EPSS
SaveExploits1References1
OSV
OSV
added 2026/03/05 8:53 p.m.11 views

CVE-2026-28443 OpenReplay: SQL injection in cards/search via unvalidated sort field parameter

OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /projectId/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0...

6.9CVSS5.8AI score
SaveExploits0References3
EUVD
EUVD
added 2026/03/05 8:53 p.m.23 views

EUVD-2026-9880

OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /projectId/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0...

6.9CVSS5.9AI score0.00341EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 8:53 p.m.8 views

CVE-2026-28443

OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /projectId/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0...

6.9CVSS5.9AI score0.00341EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/03/05 8:53 p.m.64 views

CVE-2026-28443 OpenReplay: SQL injection in cards/search via unvalidated sort field parameter

OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /projectId/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0...

6.9CVSS0.00341EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/05 8:53 p.m.39 views

CVE-2026-28443

OpenReplay (self-hosted session replay) has a SQL injection in the POST /{projectId}/cards/search endpoint, specifically in the sort.field parameter, that affects versions prior to 1.20.0. The issue has been patched in version 1.20.0. Practical impact is high (as indicated by the CVSS data in the...

9.8CVSS5.9AI score0.00341EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.37 views

PT-2026-23518

Name of the Vulnerable Software and Affected Versions OpenReplay versions prior to 1.20.0 Description OpenReplay is a self-hosted session replay suite. The /projectId/cards/search API endpoint is susceptible to SQL injection due to a flaw in the sort.field parameter. This allows for potential...

9.8CVSS5.8AI score0.00341EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2026/02/25 12:00 a.m.13 views

The vulnerability of the `snd_jack_dev_register()` function in the sound/core/jack.c module allows a hacker to cause a service failure in Linux operating systems with integrated audio cards.

The vulnerability of the sndjackdevregister function in the sound/core/jack.c module, which supports audio cards in Linux operating systems, is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00266EPSS
SaveExploits0References23Affected Software3
RedhatCVE
RedhatCVE
added 2026/02/20 1:26 p.m.11 views

CVE-2026-24375

Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through = 3.2.4...

5.3CVSS5.5AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.9 views

CVE-2026-24375

Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through = 3.2.4...

5.3CVSS0.00214EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:26 a.m.6 views

CVE-2026-24375

Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through = 3.2.4...

5.5AI score0.00214EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/19 8:26 a.m.33 views

CVE-2026-24375

CVE-2026-24375 : Missing Authorization in the WP Swings Ultimate Gift Cards For WooCommerce plugin (woo-gift-cards-lite), affected versions: n/a through

5.3CVSS5.4AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/19 8:26 a.m.41 views

CVE-2026-24375 WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through = 3.2.4...

5.3CVSS0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:26 a.m.11 views

CVE-2026-24375 WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through = 3.2.4...

5.3CVSS5.5AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:00 a.m.13 views

PT-2026-20670

Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Gift Cards For WooCommerce: from n/a through = 3.2.4...

5.5AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/19 12:00 a.m.21 views

WordPress plugin Ultimate Gift Cards For WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

5.3CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Rows per page
Query Builder