Lucene search
+L

11488 matches found

RedhatCVE
RedhatCVE
added 2024/10/16 10:27 a.m.19 views

CVE-2024-21268

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.2.11-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

8.1CVSS7AI score0.00441EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/10/16 10:27 a.m.27 views

CVE-2024-21267

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Planning. Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management...

8.1CVSS7AI score0.00441EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/10/16 9:57 a.m.25 views

CVE-2024-21278

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award Processes. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS7AI score0.00442EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/10/16 9:56 a.m.17 views

CVE-2024-21270

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Tasks. Supported versions that are affected are 12.2.6-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common...

8.1CVSS7.1AI score0.00441EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/10/16 9:56 a.m.19 views

CVE-2024-21269

Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite component: Compensation Plan. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Incentive...

8.1CVSS7.1AI score0.00441EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/16 7:54 a.m.25 views

CVE-2024-45461 Apache CloudStack Quota plugin: Access checks not enforced in Quota

The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to acce...

5.7CVSS7.1AI score0.00729EPSS
SaveExploits0References3
NVD
NVD
added 2024/10/16 7:15 a.m.32 views

CVE-2023-7294

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the createmollieprofile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-leve...

7.1CVSS0.00336EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/10/16 7:15 a.m.4 views

CVE-2023-7294

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the createmollieprofile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-leve...

7.1CVSS5.4AI score0.00336EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/16 7:15 a.m.10 views

CVE-2023-7291

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createmollieaccount function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

8.1CVSS5.8AI score0.00359EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/16 7:15 a.m.31 views

CVE-2023-7288

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updateprofilepreference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

5.4CVSS0.0028EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/16 6:43 a.m.63 views

CVE-2023-7294

The CVE concerns the WordPress Paytium: Mollie payment forms & donations plugin. A missing capability check in the create_mollie_profile function affects versions up to 4.3.7, enabling authenticated users with subscriber-level access to modify data by creating a Mollie payment profile. The issue ...

7.1CVSS6.2AI score0.00336EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/10/16 6:43 a.m.33 views

CVE-2023-7294 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the createmollieprofile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-leve...

7.1CVSS0.00336EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/16 6:43 a.m.17 views

CVE-2023-7294 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the createmollieprofile function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-leve...

7.1CVSS6.7AI score0.00336EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/16 6:43 a.m.15 views

CVE-2023-7291 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_account'

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createmollieaccount function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

7.1CVSS6.6AI score0.00359EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/16 6:43 a.m.51 views

CVE-2023-7288

The Paytium: Mollie payment forms & donations WordPress plugin is affected up to version 4.3.7 due to a missing capability check in update_profile_preference. This allows authenticated users with subscriber-level access to modify plugin settings, potentially impacting data integrity. Remediation:...

5.4CVSS4.5AI score0.0028EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/16 6:43 a.m.16 views

CVE-2023-7288 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updateprofilepreference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

5.4CVSS6.7AI score0.0028EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/10/16 6:43 a.m.27 views

CVE-2023-7288 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updateprofilepreference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

5.4CVSS0.0028EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.6 views

WordPress plugin Paytium: Mollie payment forms & donations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

5.4CVSS6.4AI score0.0028EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.12 views

WordPress plugin Paytium: Mollie payment forms & donations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

8.1CVSS6.5AI score0.00359EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/15 8:15 p.m.10 views

CVE-2024-21278

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award Processes. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS5.8AI score0.00442EPSS
SaveExploits0References1
Rows per page
Query Builder