Lucene search
K

1081 matches found

OSV
OSV
added 2025/02/12 2:15 p.m.2 views

CVE-2024-23563

HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data...

4.4CVSS5.8AI score0.00145EPSS
Exploits0References1
NVD
NVD
added 2025/02/12 2:15 p.m.9 views

CVE-2024-23563

HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data...

4.4CVSS0.00145EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/07 6:1 p.m.5 views

CVE-2025-22696

Missing Authorization vulnerability in WPDeveloper Document Block – Upload & Embed Docs document.This issue affects Document Block – Upload & Embed Docs: from n/a through = 1.1.0...

5.4CVSS7.2AI score0.00268EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:46 a.m.3 views

CVE-2024-49672

Cross-Site Request Forgery CSRF vulnerability in giffordcheung Google Docs RSVP google-docs-rsvp-guestlist allows Stored XSS.This issue affects Google Docs RSVP: from n/a through = 2.0.1...

7.1CVSS5.9AI score0.00166EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:26 a.m.4 views

CVE-2024-42370

Litestar is an Asynchronous Server Gateway Interface ASGI framework. In versions 2.10.0 and prior, Litestar's docs-preview.yml workflow is vulnerable to Environment Variable injection which may lead to secret exfiltration and repository manipulation. This issue grants a malicious actor the...

8.3CVSS7AI score0.00614EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:15 p.m.6 views

CVE-2024-35696

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Docs allows Reflected XSS.This issue affects WP Docs: from n/a through 2.1.3...

7.1CVSS6.9AI score0.00327EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/04 6:3 p.m.37 views

Security Bulletin: IBM Instana Observability is vulnerable to AuthZ Plugin Bypass and Privilege Escalation

Summary Vulnerability in Docker Engine that could allow attackers to bypass authorization plugins AuthZ was remediated in IBM Observability with Instana Build 279. CVE-2024-41110 Vulnerability Details CVEID:CVE-2024-41110 DESCRIPTION: Moby is an open-source project created by Docker for software...

9.9CVSS9.9AI score0.16496EPSS
Exploits0Affected Software1
CVE
CVE
added 2025/02/04 2:21 p.m.48 views

CVE-2025-22696

CVE-2025-22696): WordPress Document Block – Upload & Embed Docs plugin (Document Block – Upload & Embed Docs) contains a Missing Authorization vulnerability affecting versions 1.1.0 and earlier. The issue arises from insufficient authorization checks, enabling an unauthenticated actor to perform ...

5.4CVSS7.2AI score0.00268EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.3 views

PT-2025-4631 · Unknown · Embedpress Document Block – Upload & Embed Docs

Name of the Vulnerable Software and Affected Versions: Document Block – Upload & Embed Docs versions 1.1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in the EmbedPress Document Block – Upload & Embed Docs. This vulnerability affects the ability to...

5.4CVSS9.3AI score0.00268EPSS
Exploits0References4
OSV
OSV
added 2025/02/03 5:25 p.m.2 views

MAL-2025-1041 Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

7AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 5:25 p.m.1 views

Malicious code in continue-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4758de25ad99ec1a3c7b2bc7bfe0e9657ccef34aa389e3f39db67720e64b3705 Any computer that has this package installed or running should be considered...

6.8AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 5:25 p.m.2 views

Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

6.8AI score
Exploits0References3
OSV
OSV
added 2025/02/03 5:25 p.m.1 views

MAL-2025-1211 Malicious code in continue-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4758de25ad99ec1a3c7b2bc7bfe0e9657ccef34aa389e3f39db67720e64b3705 Any computer that has this package installed or running should be considered...

7AI score
Exploits0References3
OSV
OSV
added 2025/02/03 4:56 p.m.2 views

MAL-2025-850 Malicious code in micrometer-docs (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 4:56 p.m.2 views

Malicious code in micrometer-docs (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2025/02/03 8:34 a.m.2 views

MAL-2025-1119 Malicious code in experimenter-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4c2a69d33bc5a84c51066ba601bfae3ba86437ddec7c887b6a243d444e1305 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 8:34 a.m.3 views

Malicious code in experimenter-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4c2a69d33bc5a84c51066ba601bfae3ba86437ddec7c887b6a243d444e1305 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
Patchstack
Patchstack
added 2025/01/31 2:0 p.m.3 views

WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Document Block – Upload & Embed Docs versions = 1.1.0...

5.4CVSS7AI score0.00268EPSS
Exploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/30 4:55 p.m.2 views

Malicious code in fabric-shim-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/30 4:55 p.m.4 views

Malicious code in cli-docs-site (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
Exploits0
Rows per page
Query Builder