Lucene search
+L

57 matches found

Patchstack
Patchstack
added 2023/09/12 12:0 a.m.12 views

WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Server Side Request Forgery (SSRF)

Software Crayon Syntax Highlighter Type Plugin Vulnerable versions = 2.8.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2023-4893 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 21b930dce2bc Credits Lana Codes...

6.4CVSS7AI score0.00316EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/11 12:0 a.m.7 views

PT-2023-31013 · WordPress · Crayon Syntax Highlighter

Name of the Vulnerable Software and Affected Versions: Crayon Syntax Highlighter plugin for WordPress versions up to, and including, 2.8.4 Description: The issue allows authenticated attackers with contributor-level permissions or above to make web requests to arbitrary locations originating from...

6.4CVSS6.1AI score0.00316EPSS
Exploits0References7
OSV
OSV
added 2023/05/22 10:15 a.m.4 views

CVE-2022-47167

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

8.8CVSS5.8AI score0.00264EPSS
Exploits0References1
Prion
Prion
added 2023/05/22 10:15 a.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

6.8CVSS8.7AI score0.00264EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/22 9:14 a.m.8 views

CVE-2022-47167 WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

5.4CVSS9AI score0.00264EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/22 9:14 a.m.26 views

CVE-2022-47167 WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

5.4CVSS9AI score0.00264EPSS
Exploits0References1
CVE
CVE
added 2023/05/22 9:14 a.m.65 views

CVE-2022-47167

CVE-2022-47167 affects the WordPress Crayon Syntax Highlighter plugin, versions

8.8CVSS7.2AI score0.00264EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/22 12:0 a.m.5 views

WordPress Plugin Crayon Syntax Highlighter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.8AI score0.00264EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/22 12:0 a.m.7 views

PT-2023-15210 · Aram Kocharyan · Crayon Syntax Highlighter

Name of the Vulnerable Software and Affected Versions: Aram Kocharyan Crayon Syntax Highlighter plugin versions = 2.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS8.4AI score0.00264EPSS
Exploits0References4
Patchstack
Patchstack
added 2023/01/13 12:0 a.m.17 views

WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Crayon Syntax Highlighter Type Plugin Vulnerable versions = 2.8.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47167 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 6128d1f41a07 Credits István Márt...

8.8CVSS6.7AI score0.00264EPSS
Exploits0References1Affected Software1
vulnersOsv
vulnersOsv
added 2021/08/25 8:48 p.m.6 views

crayon-audio (>=0.6.0 <=0.7.1) potentially affected by CVE-2020-35889 via crayon (>=0.6.0 <=0.7.1)

crayon CARGO version =0.6.0, =0.6.0, =0.7.1 Source cves: CVE-2020-35889 Source advisory: OSV:GHSA-M833-JV95-MFJH...

8.1CVSS7.2AI score0.0087EPSS
Exploits0
OSV
OSV
added 2021/08/25 8:48 p.m.1 views

GHSA-M833-JV95-MFJH Memory safety violation in crayon

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS5.9AI score0.0087EPSS
Exploits0References4
CNVD
CNVD
added 2021/01/06 12:0 a.m.8 views

Unspecified vulnerability in Mozilla Rust crayon crate

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in crayon crate in Mozilla Rust version 2020-08-31, which stems from a memory security violation via a handle-like handle. No details of the vulnerability are provided at this tim...

8.1CVSS6.6AI score0.0087EPSS
Exploits0References1
OSV
OSV
added 2020/12/31 10:15 a.m.17 views

CVE-2020-35889

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2020/12/31 10:15 a.m.38 views

CVE-2020-35889

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.1CVSS8.2AI score0.0087EPSS
Exploits0References1
Prion
Prion
added 2020/12/31 10:15 a.m.16 views

Design/Logic Flaw

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

6.8CVSS8.1AI score0.0087EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/12/31 8:24 a.m.54 views

CVE-2020-35889

CVE-2020-35889 affects the Rust crayon crate. The issue is a time-of-check to time-of-use (TOCTOU) memory-safety vulnerability in the HandleLike handling (ObjectPool/HandlePool) that can enable memory-safety violations. Root cause is a misbehaving HandleLike implementation, documented in the RUST...

8.1CVSS8.1AI score0.0087EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/31 8:24 a.m.34 views

CVE-2020-35889

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

8.2AI score0.0087EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/31 12:0 a.m.7 views

Rust crayon crate 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in crayon crate in Mozilla Rust version 2020-08-31, which stems from a memory security violation via a handle-like handle. No details of the vulnerability are provided at this tim...

8.1CVSS5.8AI score0.0087EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2020/08/31 12:0 p.m.5 views

crayon-audio (>=0.6.0 <=0.7.1) potentially affected by CVE-2020-35889 via crayon (>=0.6.0 <=0.7.1)

crayon CARGO version =0.6.0, =0.6.0, =0.7.1 Source cves: CVE-2020-35889 Source advisory: OSV:RUSTSEC-2020-0037...

8.1CVSS7.2AI score0.0087EPSS
Exploits0
Rows per page
Query Builder