Lucene search
+L

57 matches found

Positive Technologies
Positive Technologies
•added 2023/09/11 12:00 a.m.•21 views

PT-2023-31013 · WordPress · Crayon Syntax Highlighter

Name of the Vulnerable Software and Affected Versions: Crayon Syntax Highlighter plugin for WordPress versions up to, and including, 2.8.4 Description: The issue allows authenticated attackers with contributor-level permissions or above to make web requests to arbitrary locations originating from...

6.4CVSS6.1AI score0.00385EPSS
SaveExploits0References7
OSV
OSV
•added 2023/05/22 10:15 a.m.•15 views

CVE-2022-47167

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

8.8CVSS5.8AI score0.00264EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/22 10:15 a.m.•25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

6.8CVSS8.7AI score0.00264EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/22 9:14 a.m.•37 views

CVE-2022-47167 WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

5.4CVSS9AI score0.00264EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/22 9:14 a.m.•83 views

CVE-2022-47167

CVE-2022-47167 affects the WordPress Crayon Syntax Highlighter plugin, versions

8.8CVSS7.2AI score0.00264EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/22 9:14 a.m.•10 views

CVE-2022-47167 WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

5.4CVSS9AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/05/22 12:00 a.m.•15 views

WordPress Plugin Crayon Syntax Highlighter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.8AI score0.00264EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/22 12:00 a.m.•1 views

CVE-2022-47167: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

8.8CVSS5.8AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/22 12:00 a.m.•17 views

PT-2023-15210 · Aram Kocharyan · Crayon Syntax Highlighter

Name of the Vulnerable Software and Affected Versions: Aram Kocharyan Crayon Syntax Highlighter plugin versions = 2.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS8.4AI score0.00264EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2023/01/13 12:00 a.m.•23 views

WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Crayon Syntax Highlighter Type Plugin Vulnerable versions = 2.8.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47167 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 6128d1f41a07 Credits István Márt...

8.8CVSS6.7AI score0.00264EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2021/08/25 8:48 p.m.•6 views

GHSA-M833-JV95-MFJH Memory safety violation in crayon

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS5.9AI score0.00881EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/01/06 12:00 a.m.•19 views

Unspecified vulnerability in Mozilla Rust crayon crate

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in crayon crate in Mozilla Rust version 2020-08-31, which stems from a memory security violation via a handle-like handle. No details of the vulnerability are provided at this tim...

8.1CVSS6.6AI score0.00881EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/31 10:15 a.m.•46 views

CVE-2020-35889

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS8.2AI score0.00881EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/31 10:15 a.m.•22 views

CVE-2020-35889

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS7.3AI score
SaveExploits0References1
Prion
Prion
•added 2020/12/31 10:15 a.m.•24 views

Design/Logic Flaw

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

6.8CVSS8.1AI score0.00881EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/12/31 8:24 a.m.•67 views

CVE-2020-35889

CVE-2020-35889 affects the Rust crayon crate. The issue is a time-of-check to time-of-use (TOCTOU) memory-safety vulnerability in the HandleLike handling (ObjectPool/HandlePool) that can enable memory-safety violations. Root cause is a misbehaving HandleLike implementation, documented in the RUST...

8.1CVSS8.1AI score0.00881EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/12/31 8:24 a.m.•44 views

CVE-2020-35889

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.2AI score0.00881EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2020/12/31 12:00 a.m.•15 views

Rust crayon crate 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in crayon crate in Mozilla Rust version 2020-08-31, which stems from a memory security violation via a handle-like handle. No details of the vulnerability are provided at this tim...

8.1CVSS5.8AI score0.00881EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/31 12:00 a.m.•6 views

CVE-2020-35889: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS5.8AI score0.00881EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/08/22 12:00 a.m.•16 views

WordPress crayon-syntax-highlighter plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. crayon-syntax-highlighter is used in one of the syntax highlighting plugin built using PHP and jQuery. A cross-site scripting...

6.1CVSS6.2AI score0.01524EPSS
SaveExploits0References1
Rows per page
Query Builder