Lucene search
+L

4208 matches found

Positive Technologies
Positive Technologies
•added 2022/02/11 12:00 a.m.•21 views

PT-2022-6487

Name of the Vulnerable Software and Affected Versions Git versions through 2.35.1 Description The issue is related to the disclosure of information in the error data area of the distributed version control system Git. This could present a security risk if information-disclosure auditing processes...

7.5CVSS6.8AI score0.02624EPSS
SaveExploits1References22
attackerkb
attackerkb
•added 2022/02/04 2:15 a.m.•13 views

CVE-2022-24147

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service DoS via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters...

7.8CVSS7.2AI score0.01175EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/02/04 2:15 a.m.•18 views

CVE-2022-24147

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service DoS via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters...

7.5CVSS7.2AI score0.01175EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/02/04 12:00 a.m.•21 views

Tenda Ax3 缓冲区错误漏洞

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a Denial of Service DoS via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters...

7.8CVSS6.1AI score0.01175EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•33 views

Mageia: Security Advisory (MGASA-2021-0554)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.02172EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2022/01/24 8:15 a.m.•18 views

CVE-2021-24733

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally...

4.3CVSS5.8AI score0.00783EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/01/24 8:15 a.m.•11 views

CVE-2021-24733

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally...

4.3CVSS5.8AI score0.00783EPSS
SaveExploits2References2
NVD
NVD
•added 2022/01/24 8:15 a.m.•45 views

CVE-2021-24733

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally...

4.3CVSS0.00783EPSS
SaveExploits2References1
Prion
Prion
•added 2022/01/24 8:15 a.m.•37 views

Default credentials

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally...

4CVSS4.6AI score0.00783EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/01/24 8:00 a.m.•43 views

CVE-2021-24733 WP Post Page Clone < 1.2 - Unauthorised Post Access

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally...

4.9AI score0.00783EPSS
SaveExploits2References1
CVE
CVE
•added 2022/01/24 8:00 a.m.•83 views

CVE-2021-24733

CVE-2021-24733 pertains to the WordPress plugin WP Post Page Clone. Multiple sources confirm an access-control flaw in versions older than 1.2 that lets users with very low privileges (as low as Contributor) clone and view other users’ drafts and password‑protected posts that aren’t normally acce...

4.3CVSS4.5AI score0.00783EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•20 views

WordPress plugin 访问控制错误漏洞

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. An access control error vulnerability exists in versions prior to Wordpress Plugin WP Post Page Clone...

4.3CVSS5.7AI score0.00783EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/01/24 12:00 a.m.•3 views

PT-2022-37754

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43989 Crash type: Null-dereference READ Crash state: gstate clone core gs gsave gs output page...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/24 12:00 a.m.•6 views

PT-2022-9455

Name of the Vulnerable Software and Affected Versions WP Post Page Clone WordPress plugin versions prior to 1.2 Description The issue allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts, which they cannot view normally. Recommendations...

4.3CVSS0.00783EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•9 views

CVE-2021-24733: Incorrect Authorization

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally...

4.3CVSS5.8AI score0.00783EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2022/01/15 10:15 a.m.•11 views

CVE-2021-33963

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/macaddrclone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands...

10CVSS7.4AI score0.03071EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2022/01/15 10:15 a.m.•21 views

CVE-2021-33963

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/macaddrclone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands...

9.8CVSS6AI score0.03071EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/01/15 12:00 a.m.•23 views

PT-2022-10304 · China Mobile · An Lianbao Wf-1

Name of the Vulnerable Software and Affected Versions: China Mobile An Lianbao WF-1 version 1.0.1 Description: The issue concerns a command injection vulnerability in the web interface of the affected router. Specifically, the "/api/ZRMacClone/mac addr clone" endpoint, which receives parameters v...

10CVSS9.5AI score0.03071EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2021/12/27 12:00 a.m.•33 views

WordPress WP Post Page Clone plugin <= 1.1 - Unauthorized Post Access vulnerability

Unauthorized Post Access vulnerability discovered by apple502j in WordPress WP Post Page Clone plugin versions = 1.1. Solution Update the WordPress WP Post Page Clone plugin to the latest available version at least 1.2...

4.3CVSS2.5AI score0.00783EPSS
SaveExploits2References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•3 views

PT-2021-27941

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as cs adjust counts icc, gstate clone...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder