Lucene search
+L

44 matches found

ATTACKERKB
ATTACKERKB
added 2021/06/14 2:15 p.m.5 views

CVE-2021-24360

The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users contributor+ to perform Blind SQL Injection attacks...

6.5CVSS6.7AI score0.01164EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2021/05/31 12:0 a.m.33 views

WordPress Yes/No Chart plugin <= 1.0.11 - Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Blind SQL Injection SQLi vulnerability discovered by Apple502j in WordPress Yes/No Chart plugin versions = 1.0.11. Solution Update the WordPress Yes/No Chart plugin to the latest available version at least 1.0.12...

6.5CVSS2.8AI score0.01164EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2017/01/06 9:59 p.m.6 views

CVE-2016-4295

When opening a Hangul Hcell Document .cell and processing a particular record within the Workbook stream, an index miscalculation leading to a heap overlow can be made to occur in Hancom Office 2014. The vulnerability occurs when processing data for a formula used to render a chart via the...

7.8CVSS6.3AI score0.02232EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2017/01/06 9:59 p.m.4 views

CVE-2016-4295

When opening a Hangul Hcell Document .cell and processing a particular record within the Workbook stream, an index miscalculation leading to a heap overlow can be made to occur in Hancom Office 2014. The vulnerability occurs when processing data for a formula used to render a chart via the...

7.8CVSS6.5AI score0.02232EPSS
SaveExploits2References4
Rows per page
Query Builder