Lucene search
+L

646 matches found

CNNVD
CNNVD
added 2024/04/01 12:00 a.m.9 views

WordPress plugin Shortcodes and extra features for Phlox theme 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress...

8.8CVSS8AI score0.00361EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/06 12:00 a.m.8 views

PT-2024-22301 · Jenkins · Jenkins Appspider Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins AppSpider Plugin versions 1.0.16 and earlier Description: The issue allows attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names due to a lack of permissio...

4.3CVSS6.3AI score0.0045EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2024/02/28 10:15 p.m.4 views

CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

7.6CVSS7.1AI score0.00507EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.5 views

Unisoc Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisoc Corporation UNISOC. A security vulnerability exists in Unisoc Chipsets, which stems from a lack of boundary checking in the cp dump driver, resulting in out-of-bounds reads...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/01/20 6:15 a.m.5 views

CVE-2024-0679

The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the pluginactioncallback function in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to install and...

6.5CVSS7.4AI score0.01301EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/11 7:15 a.m.13 views

CVE-2023-6883

The Easy Social Feed plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 6.5.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

4.3CVSS5.8AI score0.00323EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/09 12:00 a.m.10 views

SAP LT Replication Server 授权问题漏洞

SAP LT Replication Server is a solution from SAP Germany. An authorization issue vulnerability exists in SAP LT Replication Server that stems from not performing required authorization checks. An attacker with elevated privileges could exploit the vulnerability to perform malicious actions,...

7.3CVSS6.7AI score0.00396EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/08 7:15 p.m.11 views

CVE-2023-6139

The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks...

6.5CVSS5.8AI score0.00609EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2023/12/12 12:00 a.m.9 views

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from not performing authorization checks in the playbooks plugin, allowing unauthorized attackers to gain access to uninternal information...

6.5CVSS6.9AI score0.00435EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/05 12:00 a.m.12 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an authorization issue vulnerability that stems from an interface without privilege checks in the DFR module. An attacker could...

7.5CVSS7.4AI score0.0042EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.6 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the enginnermode service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7AI score0.00094EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.9 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Zhanrui UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the wifi service...

7.8CVSS7.1AI score0.00097EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.11 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...

5.5CVSS7AI score0.00095EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.8 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the audio module, which may result in out-of-bounds writes...

7.8CVSS6.8AI score0.00113EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.13 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the omacp service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7AI score0.00095EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.8 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7.1AI score0.00095EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.10 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the decoder module, which may result in out-of-bounds writes...

7.8CVSS6.8AI score0.00113EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.9 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the display drm module, which may result in out-of-bounds writes...

6.7CVSS6.8AI score0.00111EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/01 12:00 a.m.8 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Zhanrui UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in the engineermode, leading to local information disclosure...

5.5CVSS6.2AI score0.0008EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/01 12:00 a.m.8 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Zhanrui UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of permission checking in the engineermode, leading to local information disclosure...

5.5CVSS6.2AI score0.0008EPSS
SaveExploits0References2
Rows per page
Query Builder