Lucene search
+L

168 matches found

Cvelist
Cvelist
added 2024/10/28 12:35 p.m.45 views

CVE-2024-50497 WordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wdesco Advanced Online Ordering and Delivery Platform advanced-online-ordering-and-delivery-platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering a...

8.1CVSS0.00525EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 12:35 p.m.16 views

CVE-2024-50497 WordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wdesco Advanced Online Ordering and Delivery Platform advanced-online-ordering-and-delivery-platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering a...

8.1CVSS5.9AI score0.00525EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.12 views

WordPress plugin Advanced Online Ordering and Delivery Platform 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS6.6AI score0.00525EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/25 8:40 a.m.11 views

WordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Advanced Online Ordering and Delivery Platform versions = 2.0.0...

9.8CVSS7AI score0.00525EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/25 12:00 a.m.16 views

WordPress Advanced Online Ordering and Delivery Platform Plugin <= 2.0.0 is vulnerable to Local File Inclusion

Software Advanced Online Ordering and Delivery Platform Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-50497 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID b7ca1d7a7e36 Credits stealthcopt...

9.8CVSS7.2AI score0.00525EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/14 12:00 a.m.12 views

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from undisclosed traffic that could lead to increased memory resource utilization...

8.7CVSS6.7AI score0.00481EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/08 12:00 a.m.7 views

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A man-in-the-middle attack vulnerability exists in F5 BIG-IP Next Central Manager, which can be exploited by an attacker to ga...

7.4CVSS6.9AI score0.00548EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/14 12:00 a.m.14 views

F5 BIG-IP Buffer Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from an undisclosed request that could cause the Traffic Management Microkernel TMM to...

7.5CVSS6.7AI score0.00515EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/14 12:00 a.m.12 views

F5 BIG-IP SQL Injection Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. F5 BIG-IP suffers from an SQL injection vulnerability that originates from an SQL injection vulnerability in an undisclosed pa...

3.8CVSS8AI score0.00302EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/17 5:15 p.m.10 views

CVE-2024-20270

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This...

5.4CVSS6AI score0.00355EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/17 5:15 p.m.31 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This...

4.9CVSS6AI score0.00355EPSS
SaveExploits0References1Affected Software2
CNVD
CNVD
added 2023/10/11 12:00 a.m.72 views

F5 BIG-IP Next SPK Hardcoded Credentials Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A hard-coded credential vulnerability exists in F5 BIG-IP Next SPK, which can be exploited by an attacker with the ability to...

7.4CVSS6.8AI score0.00376EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/11 12:00 a.m.59 views

F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-75595)

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to view shared keys...

5.5CVSS6.4AI score0.00171EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/11 12:00 a.m.46 views

F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-75596)

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to view TSIG keys in...

5.5CVSS6.4AI score0.00171EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/11 12:00 a.m.66 views

F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-75598)

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by attackers to view sensitive information...

4.4CVSS6.3AI score0.00175EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.11 views

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management and other functions. An access control error vulnerability exists in F5 BIG-IP, which can be exploited by attackers to cross the...

8.7CVSS6.6AI score0.00435EPSS
SaveExploits0References3
CVE
CVE
added 2023/09/06 5:08 p.m.166 views

CVE-2023-20238

CVE-2023-20238 affects Cisco BroadWorks Application Delivery Platform and BroadWorks Xtended Services Platform. The issue is an authentication bypass in the SSO token validation logic, allowing an unauthenticated, remote attacker to forge credentials and access the system. Potential impacts inclu...

10CVSS8.2AI score0.15193EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2023/09/06 12:00 a.m.14 views

Cisco BroadWorks Application Security Vulnerability

Cisco BroadWorks Application is an enterprise-grade calling and collaboration platform from Cisco USA. A security vulnerability exists in the Cisco BroadWorks Application Delivery Platform and Xtended Services Platform that stems from an improper method used to authenticate SSO tokens, allowing a...

10CVSS6.9AI score0.15193EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/09/06 12:00 a.m.10 views

PT-2023-4831 · Cisco · Cisco Broadworks Application Delivery Platform +1

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform affected versions not specified Description: A vulnerability in the single sign-on SSO implementation of the affected platforms could allow an...

10CVSS9.5AI score0.15193EPSS
SaveExploits0References33
CNNVD
CNNVD
added 2023/08/02 12:00 a.m.11 views

F5 BIG-IP 授权问题漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by attackers to obtain sensitive informati...

6.1CVSS6AI score0.00176EPSS
SaveExploits0References3
Rows per page
Query Builder