Lucene search
+L

862 matches found

Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•17 views

WordPress Restrict Posts based on Conditions – Conditional Post Restrictions plugin <= 1.1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Restrict Posts based on Conditions – Conditional Post Restrictions plugin versions = 1.1.2. Solution Update the WordPress Restrict Posts based on Conditions – Conditional Post Restrictions plugin to the latest available versio...

1.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•25 views

WordPress Rocket Addons – Conditional logic and form addons for Elementor Pro plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Rocket Addons – Conditional logic and form addons for Elementor Pro plugin versions = 1.0.1. Solution No patched version available...

2.5AI score
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•65 views

Huawei HarmonyOS Competitive Conditions Issue Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a conditional contention vulnerability in the binder driver subsystem of the Wearables...

4.7CVSS4.5AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/02/05 12:00 a.m.•18 views

Huawei HarmonyOS 竞争条件问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a conditional contention vulnerability in the binder driver subsystem of the Wearables...

4.7CVSS5.7AI score0.00128EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•25 views

Mageia: Security Advisory (MGASA-2018-0047)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.2AI score0.06207EPSS
SaveExploits0References6
NVD
NVD
•added 2022/01/10 2:10 p.m.•44 views

CVE-2021-42749

In Beaver Themer, attackers can bypass conditional logic controls for hiding content when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set...

5.3CVSS0.0107EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/10 2:10 p.m.•30 views

Xxe

In Beaver Themer, attackers can bypass conditional logic controls for hiding content when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set...

5CVSS5.3AI score0.0107EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/10 12:00 a.m.•18 views

WordPress plugin 安全漏洞

WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in WordPress plugin, which originates in Beaver Themer, and can be exploited by an attacker to bypass conditional logic controls used to hide content when viewing a post archive, utilizing the...

5.3CVSS5.8AI score0.0107EPSS
SaveExploits1References3
CVE
CVE
•added 2022/01/07 6:09 p.m.•65 views

CVE-2021-42749

CVE-2021-42749 affects Beaver Themer (WordPress plugin). The vulnerability lets attackers bypass conditional logic controls used to hide content when viewing post archives, provided a Themer layout is applied to the archives and the post excerpt field is not set. This is a straightforward logic b...

5.3CVSS5.3AI score0.0107EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/01/07 6:09 p.m.•45 views

CVE-2021-42749

In Beaver Themer, attackers can bypass conditional logic controls for hiding content when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set...

5.6AI score0.0107EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2021/12/24 8:30 p.m.•30 views

Spray365 - Makes Spraying Microsoft Accounts (Office 365 / Azure AD) Easy Through Its Customizable Two-Step Password Spraying Approach

Spray365 is a password spraying tool that identifies valid credentials for Microsoft accounts Office 365 / Azure AD. How is Spray365 different from the many other password spraying tools that are already available? Spray365 enables passwords to be sprayed from an "execution plan". While having a...

7.8AI score
SaveExploits0References2
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•41 views

Mozilla Firefox conditional competition issue vulnerability

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a conditional competition issue, which could be exploited by an attacker to force a notification to receive full-screen and pointer-locked access to the page...

4.3CVSS3.3AI score0.01245EPSS
SaveExploits0References1
Huntr
Huntr
•added 2021/12/05 8:00 a.m.•18 views

Open Redirect in openwhyd/openwhyd

Description This vulnerability was discovered in Here by @mdakh404. However, it is not patched properly and I bypassed with a simple trick. diff r.html = mainTemplate.renderWhydPager; // call the adequate renderer - if r.redirect response.redirectr.redirect; + if r.redirect...

5.8CVSS6.3AI score0.00864EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2021/11/10 7:13 p.m.•52 views

Overflow/crash in `tf.range`

Impact While calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition will be cast to double and the result would be truncated before the...

5.5CVSS1.3AI score0.00209EPSS
SaveExploits0References10Affected Software3
PyPA
PyPA
•added 2021/11/05 10:15 p.m.•14 views

PYSEC-2021-395

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...

5.5CVSS6.8AI score0.00209EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2021/11/05 10:15 p.m.•30 views

Design/Logic Flaw

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...

2.1CVSS5.4AI score0.00209EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2021/11/05 9:45 p.m.•48 views

CVE-2021-41202 Overflow/crash in `tf.range`

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...

5.5CVSS5.6AI score0.00209EPSS
SaveExploits0References5
OSV
OSV
•added 2021/11/02 7:46 a.m.•18 views

ALBA-2021:4055 nfs-utils bug fix and enhancement update

The nfs-utils packages provide a daemon for the kernel Network File System NFS server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Bug Fixes and...

7.1AI score
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
•added 2021/10/27 4:00 p.m.•82 views

New insights on cybersecurity in the age of hybrid work

As we approach the last week of Cybersecurity Awareness Month, I think about what is top of mind for myself and my peers in security. The past year has continued the 2020s major shift in the way organizations operate. Recent data shows that 81 percent of enterprise organizations have begun the mo...

7.4AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2021/10/27 4:00 p.m.•55 views

New insights on cybersecurity in the age of hybrid work

As we approach the last week of Cybersecurity Awareness Month, I think about what is top of mind for myself and my peers in security. The past year has continued the 2020s major shift in the way organizations operate. Recent data shows that 81 percent of enterprise organizations have begun the mo...

7.4AI score
SaveExploits0
Rows per page
Query Builder