Lucene search
+L

13332 matches found

CNNVD
CNNVD
added 2025/01/07 12:00 a.m.12 views

WordPress plugin RSVP and Event Management 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

5.3CVSS7.9AI score0.00337EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/06 12:00 a.m.17 views

The vulnerability of the Shopping Cart component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores. This vulnerability exists in the Oracle E-Business Suite, a software solution for automating business operations. It allows attackers to gain access to read, modify, or delete data.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, as well as the Oracle E-Business Suite system for automating business operations, is related to deficiencies in the authentication process. Exploiti...

8.5CVSS7.5AI score0.00403EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2025/01/03 4:15 p.m.12 views

CVE-2024-55507

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

9.8CVSS5.8AI score0.0061EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.11 views

PT-2025-3768 · Code Projects · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /user/del product.php. The manipulation of the id argument leads to SQL injection. The attac...

6.5CVSS7.3AI score0.00429EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
added 2025/01/02 9:44 p.m.8 views

libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart

A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...

6.5CVSS5.8AI score0.00813EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/01/02 8:02 p.m.9 views

libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart

A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...

6.5CVSS5.8AI score0.00813EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/01/02 6:44 p.m.11 views

libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart

A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...

6.5CVSS5.8AI score0.00813EPSS
SaveExploits0References6
NVD
NVD
added 2025/01/02 12:15 p.m.11 views

CVE-2023-46073

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through = 2.0.5.1...

5.3CVSS0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/02 11:59 a.m.27 views

CVE-2023-46073 WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through = 2.0.5.1...

5.3CVSS0.0035EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 11:59 a.m.12 views

CVE-2023-46073 WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through = 2.0.5.1...

5.3CVSS7.3AI score0.0035EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.11 views

WordPress plugin DX Delete Attached Media 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

5.3CVSS8.7AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:00 a.m.9 views

PT-2025-1499 · Nofearinc · Dx Delete Attached Media

Name of the Vulnerable Software and Affected Versions: nofearinc DX Delete Attached Media versions 2.0.5.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in nofearinc DX Delete Attached Media, which allows exploiting incorrectly configured access control...

5.3CVSS9.4AI score0.0035EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.10 views

Code-Projects Chat System 安全漏洞

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from a SQL injection in the parameter id of the /admin/deleteuser.php file. An attacker can exploit this vulnerability to obtain sensitive information...

7.5CVSS7.7AI score0.00446EPSS
SaveExploits1References5
OSV
OSV
added 2024/12/30 9:15 p.m.11 views

CVE-2024-13043

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

7.8CVSS6.2AI score0.00283EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/27 3:15 p.m.11 views

AZL-55222 CVE-2024-56614 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controlled signed integer k. Due to implicit type conversion, a large unsign...

7.8CVSS6.3AI score0.00255EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/27 3:15 p.m.2 views

DEBIAN-CVE-2024-56614

In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controlled signed integer k. Due to implicit type conversion, a large unsign...

7.8CVSS5.6AI score0.00255EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/27 3:15 p.m.11 views

AZL-55171 CVE-2024-56614 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controlled signed integer k. Due to implicit type conversion, a large unsign...

7.8CVSS6.3AI score0.00255EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/27 2:51 p.m.4 views

CVE-2024-56614 xsk: fix OOB map writes when deleting elements

In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controlled signed integer k. Due to implicit type conversion, a large unsign...

7.5AI score0.00255EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/27 12:00 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an out-of-bounds devmap write when deleting elements in the bpf module...

7.8CVSS6.6AI score0.00259EPSS
SaveExploits0References7
OSV
OSV
added 2024/12/26 4:15 p.m.8 views

CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete...

6.5CVSS5.8AI score0.00396EPSS
SaveExploits0References1
Rows per page
Query Builder