Lucene search
+L

320 matches found

Patchstack
Patchstack
added 2024/07/03 6:23 a.m.9 views

WordPress alfred24 Click & Collect plugin <= 1.1.7 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin alfred24 Click & Collect versions = 1.1.7...

7AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/07/03 12:00 a.m.10 views

WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Backdoor

Software alfred24 Click & Collect Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cf5f2b39e0cf Credits Sansec.io Required privilege Unauthenticated Published 3...

7.2AI score
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:20 p.m.8 views

Malicious code in @ks-radar/radar-send-web-log-collect (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:20 p.m.8 views

MAL-2024-2917 Malicious code in radar-error-collect (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:20 p.m.4 views

Malicious code in @ks-radar/radar-component-collect (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:20 p.m.3 views

MAL-2024-2914 Malicious code in @ks-radar/radar-blood-lineage-collect (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:20 p.m.5 views

Malicious code in @ks-radar/radar-api-collect (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:20 p.m.5 views

MAL-2024-2913 Malicious code in @ks-radar/radar-api-collect (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
NVD
NVD
added 2024/06/14 12:15 a.m.30 views

CVE-2023-35045

Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7...

4.3CVSS0.00428EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 11:50 p.m.18 views

CVE-2023-35045 WordPress Fat Rat Collect plugin <= 2.6.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7...

4.3CVSS4.7AI score0.00428EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/13 11:50 p.m.59 views

CVE-2023-35045

CVE-2023-35045 concerns the WordPress Fat Rat Collect plugin (&lt;= 2.6.7). The root cause is a Missing Authorization/Broken Access Control allowing unauthorized actions within Fat Rat Collect. The CVSS v3.1 base score is 4.3 (Medium), with impact limited to availability and none for confidential...

4.3CVSS4.7AI score0.00428EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/13 11:50 p.m.36 views

CVE-2023-35045 WordPress Fat Rat Collect plugin <= 2.6.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7...

4.3CVSS0.00428EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/13 12:00 a.m.11 views

WordPress plugin Fat Rat Collect security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.8AI score0.00428EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2024/05/30 11:44 a.m.30 views

How to Build Your Autonomous SOC Strategy

Security leaders are in a tricky position trying to discern how much new AI-driven cybersecurity tools could actually benefit a security operations center SOC. The hype about generative AI is still everywhere, but security teams have to live in reality. They face constantly incoming alerts from...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/05/18 1:40 a.m.24 views

CVE-2023-52682

A vulnerability was found in the Linux kernel's Flash-Friendly File System F2FS implementation. This issue arises from a failure to wait for block writeback in the post-read case, which could lead to data corruption or inconsistencies. Mitigation Mitigation for this issue is either not available ...

5.5CVSS7.3AI score0.00232EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/05/17 2:24 p.m.44 views

CVE-2023-52682 f2fs: fix to wait on block writeback for post_read case

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writeback for postread case If inode is compressed, but not encrypted, it missed to call f2fswaitonblockwriteback to wait for GCed page writeback in IPU write path. Thread A GC-Thread - f2fsgc -...

6.5AI score0.00232EPSS
SaveExploits0References5
NVD
NVD
added 2024/04/05 12:15 p.m.19 views

CVE-2023-6522

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

7.2CVSS7AI score0.00307EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/05 11:33 a.m.49 views

CVE-2023-6522

CVE-2023-6522 affects Extreme XDS (ExtremePacs) with an incorrect use of privileged APIs that allows collection of data as provided by users. Affected software is Extreme XDS prior to version 3914. The vulnerability stems from improper privilege management, enabling data collection by users throu...

7.2CVSS5.8AI score0.00307EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/05 11:33 a.m.10 views

CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

7.2CVSS5.8AI score0.00307EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/05 11:33 a.m.23 views

CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

7.2CVSS7.2AI score0.00307EPSS
SaveExploits0References2
Rows per page
Query Builder