Lucene search
K

1547 matches found

Vulnrichment
Vulnrichment
added 2025/01/15 3:23 p.m.7 views

CVE-2025-22799 WordPress Neon Product Designer Plugin <= 2.1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Vertim Coders Neon Product Designer allows SQL Injection.This issue affects Neon Product Designer: from n/a through 2.1.1...

8.5CVSS9AI score0.00386EPSS
Exploits0References1
NVD
NVD
added 2024/12/13 3:15 p.m.5 views

CVE-2023-41849

Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0...

5.3CVSS0.00476EPSS
Exploits0References1
CVE
CVE
added 2024/12/13 2:24 p.m.35 views

CVE-2023-41849

The CVE-2023-41849 entry concerns the WordPress Posts Like Dislike plugin (

5.3CVSS5.1AI score0.00476EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.14 views

CVE-2023-41849 WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0...

5.3CVSS0.00476EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.10 views

CVE-2023-41849 WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Happy Coders Posts Like Dislike posts-like-dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through = 1.1.0...

5.3CVSS5.8AI score0.00476EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2024/12/02 12:0 a.m.524 views

Laravel 11.0 Cross Site Scripting

/! - VULNERABILITY: Cross Site Scripting Laravel version 11.0 - Authenticated Persistent XSS - GOOGLE DORK: inurl:.com/?q= - GOOGLE DORK: Site:.com/?q= - DATE: 2024-12-01 - SECURITY RESEARCHER: E1.Coders - VENDOR: LARAVEL https://laravel.com/ - SOFTWARE LINK:...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2024/12/02 12:0 a.m.274 views

Russian FSB Cross Site Scripting

/! - VULNERABILITY: Cross Site Scripting Federal Security Service of the Russian Federation - Authenticated Persistent XSS - GOOGLE DORK: inurl:fsb.ru/fsb/sh.htm?query= - DATE: 2024-11-29 - SECURITY RESEARCHER: E1.Coders - VENDOR: FSB http://www.fsb.ru/ - SOFTWARE LINK: http://www.fsb.ru/ - CVSS:...

7.4AI score
Exploits0
CVE
CVE
added 2024/11/20 11:29 a.m.54 views

CVE-2024-52450

CVE-2024-52450 describes an Unauthenticated Local File Inclusion in the WordPress plugin “nBlocks” (versions up to and including 1.0.2) caused by improper control of filenames in PHP Include/Require statements. Public sources in the Connected documents confirm the issue affects nBlocks from n/a t...

7.5CVSS7.2AI score0.00561EPSS
Exploits0References1
OSV
OSV
added 2024/06/25 1:46 p.m.6 views

MAL-2024-6475 Malicious code in activerecord-serialize-coders (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:46 p.m.4 views

Malicious code in activerecord-serialize-coders (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
NVD
NVD
added 2024/05/17 9:15 a.m.10 views

CVE-2024-25906

Authentication Bypass by Spoofing vulnerability in WP Happy Coders Comments Like Dislike allows Functionality Bypass.This issue affects Comments Like Dislike: from n/a through 1.2.2...

4.3CVSS4.7AI score0.00395EPSS
Exploits0References1
CVE
CVE
added 2024/05/17 8:22 a.m.52 views

CVE-2024-25906

CVE-2024-25906 affects the WordPress plugin Comments Like Dislike (WP Happy Coders) up to version 1.2.2 . The issue is an authentication bypass via spoofing, specifically an IP restriction bypass that can allow functionality bypass/escalation of access as described in Patchstack and Red Hat/NVD r...

4.3CVSS6.8AI score0.00395EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.2 views

PT-2024-21197 · WordPress · Wp Happy Coders Comments Like Dislike

Name of the Vulnerable Software and Affected Versions: WP Happy Coders Comments Like Dislike versions 1.2.2 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, which allows functionality bypass. Recommendations: For versions 1.2.2 and earlier, upda...

4.3CVSS9.5AI score0.00395EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.21 views

RHEL 6 : graphicsmagick,_imagemagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - GraphicsMagick, ImageMagick: Memory exhaustion in ReadMPCImage in coders/mpc.c CVE-2017-12430 - The...

7.2AI score0.02278EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/02/01 12:0 a.m.30 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : ImageMagick vulnerability (USN-6621-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6621-1 advisory. It was discovered that ImageMagick incorrectly handled certain values when processing BMP files. An attacker could exploit thi...

6.2CVSS6.5AI score0.00437EPSS
Exploits0References2
OSV
OSV
added 2023/11/19 10:15 a.m.32 views

CVE-2023-5341

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick...

5.5CVSS5.5AI score0.00437EPSS
Exploits0References6
Cvelist
Cvelist
added 2023/11/19 9:20 a.m.20 views

CVE-2023-5341 Imagemagick: heap use-after-free in coders/bmp.c

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick...

6.2CVSS6.7AI score0.00437EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2023/11/19 9:20 a.m.30 views

CVE-2023-5341

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick...

6.2CVSS6.3AI score0.00437EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/11/06 12:0 a.m.4 views

PT-2023-15085 · Unknown · Kaizencoders Short Url

Name of the Vulnerable Software and Affected Versions: KaizenCoders Short URL versions 1.6.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS9.5AI score0.0055EPSS
Exploits0References3
Veracode
Veracode
added 2023/10/28 3:17 p.m.22 views

Denial Of Service (DoS)

imagemagick is vulnerable to Denial of Service DoS. A heap-based buffer overflow vulnerability allows an attacker to cause denial of service conditions via ReadTIFFImage in coders/tiff.c, by exploiting a flaw in the way that ImageMagick handles TIFF images...

7.5CVSS7.2AI score0.0272EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder