Lucene search
+L

11520 matches found

CNNVD
CNNVD
added 2024/11/15 12:00 a.m.9 views

WordPress plugin Music Player for Elementor – Audio Player & Podcast Player 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

4.3CVSS7.9AI score0.00333EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.13 views

The software for configuring, monitoring, and controlling industrial equipment, Easergy Studio, has vulnerabilities related to insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges by modifying binary data...

7.8CVSS5.5AI score0.00172EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:00 a.m.10 views

The software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, are vulnerable to being exploited by attackers, allowing them to alter arbitrary data.

The vulnerability of software for creating and running NVIDIA Container Toolkit containers, as well as software for managing NVIDIA GPU resources, is related to the swapping of the zero pointer due to concurrent access to resources. Exploiting this vulnerability allows a remote attacker to modify...

4.1CVSS6.7AI score0.00235EPSS
SaveExploits0References6Affected Software3
NVD
NVD
added 2024/11/13 3:15 a.m.23 views

CVE-2024-10531

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...

5.3CVSS0.0054EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/13 3:15 a.m.11 views

CVE-2024-10529

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...

5.3CVSS5.8AI score0.00542EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/13 3:15 a.m.21 views

CVE-2024-10530

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the addnewassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3CVSS0.0045EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/13 2:33 a.m.33 views

CVE-2024-10529 Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...

5.3CVSS0.00542EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/13 2:33 a.m.19 views

CVE-2024-10529 Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...

5.3CVSS5AI score0.00542EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/13 2:33 a.m.32 views

CVE-2024-10531 Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Update

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...

5.3CVSS0.0054EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/13 2:33 a.m.26 views

CVE-2024-10530 Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the addnewassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3CVSS6.4AI score0.0045EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/13 2:33 a.m.27 views

CVE-2024-10530 Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the addnewassistant function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3CVSS0.0045EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/13 2:15 a.m.28 views

CVE-2024-10853

The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the removeorder AJAX action in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS0.00354EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/13 2:15 a.m.33 views

CVE-2024-10854

The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the buyoneclickimportoptions AJAX action in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with Subscriber-leve...

4.3CVSS0.00377EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/13 2:15 a.m.8 views

CVE-2024-10717

The Styler for Ninja Forms plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the deactivatelicense function in all versions up to, and including, 3.3.4. This makes it possible for authenticated...

6.5CVSS5.7AI score0.00409EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/13 2:02 a.m.22 views

CVE-2024-10854 Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Settings Import

The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the buyoneclickimportoptions AJAX action in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with Subscriber-leve...

4.3CVSS0.00377EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/13 2:02 a.m.70 views

CVE-2024-10717

CVE-2024-10717 - Styler for Ninja Forms (WordPress) Affected: Styler for Ninja Forms plugin for WordPress, all versions up to and including 3.3.4. Root cause: Missing capability check in the deactivate_license function enables unauthorized modification of data by authenticated users with Subscrib...

6.5CVSS6.2AI score0.00409EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/13 12:00 a.m.11 views

PT-2024-16487 · WordPress · The Styler For Ninja Forms

Name of the Vulnerable Software and Affected Versions: The Styler for Ninja Forms plugin for WordPress versions up to, and including, 3.3.4 Description: The issue allows unauthorized modification of data, potentially leading to a denial of service, due to a missing capability check on the...

6.5CVSS9.2AI score0.00409EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/11/12 12:00 a.m.14 views

PT-2024-16348 · WordPress · Kognetiks Chatbot

Name of the Vulnerable Software and Affected Versions: Kognetiks Chatbot for WordPress plugin for WordPress versions up to, and including, 2.1.7 Description: The issue is related to unauthorized modification of data due to a missing capability check on the update assistant function. This allows...

5.3CVSS9.2AI score0.0054EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.15 views

PT-2024-16704 · Grand Vice Info · Webopac

Name of the Vulnerable Software and Affected Versions: Webopac from Grand Vice info affected versions not specified Description: The issue is a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS8.3AI score0.00558EPSS
SaveExploits0References16
CVE
CVE
added 2024/11/09 7:35 a.m.64 views

CVE-2024-10589

CVE-2024-10589 - Leopard WordPress Offload Media (plugin) Affected: Leopard - WordPress Offload Media plugin for WordPress, versions up to and including 3.1.1. Root cause: missing capability check in import_settings() function, enabling unauthorized modification of data. Impact: authenticated att...

9.8CVSS9.5AI score0.00487EPSS
SaveExploits0References2
Rows per page
Query Builder