Lucene search
+L

5464 matches found

OSV
OSV
added 2025/01/15 8:15 a.m.6 views

UBUNTU-CVE-2024-4227

In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML having duplicate ID attributes which can lead to a DoS...

7.5CVSS7.2AI score0.00719EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/01/15 8:00 a.m.16 views

CVE-2024-4227

In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML having duplicate ID attributes which can lead to a DoS...

7.5CVSS7.4AI score0.00719EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/15 12:00 a.m.9 views

PT-2025-2635 · Genivia · Gsoap

Name of the Vulnerable Software and Affected Versions: Genivia gSOAP affected versions not specified Description: The issue allows an unauthenticated remote attacker to generate a high CPU load by forcing the system to parse an XML with duplicate ID attributes, potentially leading to a Denial of...

7.8CVSS7.7AI score0.00719EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.13 views

Genivia gSOAP 安全漏洞

Genivia gSOAP is a C/C++ software development kit with automatic coding from Genivia, Inc. A security vulnerability exists in Genivia gSOAP, which originates from a denial of service due to a high CPU load caused by an unauthenticated, remote attacker forcing the parsing of XML with duplicate ID...

7.5CVSS7.3AI score0.00719EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.7 views

PT-2025-8864

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc1+ 1464 Description A issue has been identified in the Linux kernel where the use of btrfs set item key safe to modify keys in the RAID stripe-tree can lead to corruption of the tree. This corruption is...

5.5CVSS5.8AI score0.0017EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
added 2025/01/13 12:00 a.m.6 views

PT-2025-2110 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be related to a rejected CVE candidate, which is a duplicate of...

7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/11 12:00 a.m.17 views

PT-2025-1861 · WordPress · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Post Duplicator plugin for WordPress version 2.36 and earlier Description: The issue is related to Information Exposure due to insufficient restrictions on which posts can be duplicated, making it possible for authenticated attackers with...

5.3CVSS7.1AI score0.00309EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.15 views

Chatwoot SQL注入漏洞

Chatwoot is a Chatwoot open source application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud, and more. A SQL injection vulnerability exists in Chatwoot versions prior to 3.16.0 that stems from improper input cleanup and allows an attacker t...

9.1CVSS7.9AI score0.00673EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/08 7:15 a.m.34 views

CVE-2024-12584

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS0.00362EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/08 7:15 a.m.9 views

CVE-2024-12584

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

6.5CVSS7.3AI score0.00362EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/08 6:41 a.m.36 views

CVE-2024-12584 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

4.3CVSS0.00362EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/08 12:00 a.m.10 views

WordPress plugin Xpro Addons For Elementor 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

6.5CVSS7.9AI score0.00362EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/08 12:00 a.m.16 views

PT-2025-1900 · WordPress · The 140+ Widgets | Xpro Addons For Elementor

Name of the Vulnerable Software and Affected Versions: 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress versions up to, and including, 1.4.6.2 Description: The issue allows authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data...

6.5CVSS7.2AI score0.00362EPSS
SaveExploits0References8
CVE
CVE
added 2025/01/07 3:21 a.m.77 views

CVE-2024-12538

CVE-2024-12538 (WordPress) affects the Duplicate Post, Page and Any Custom Post plugin. According to the provided sources, it exposes sensitive information from draft, scheduled (future), private, and password-protected posts via the dpp_duplicate_as_draft function. The issue requires authenticat...

4.3CVSS7.2AI score0.00328EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.11 views

WordPress plugin Duplicate Post, Page and Any Custom Post 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

4.3CVSS7.6AI score0.00328EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/06 5:07 p.m.10 views

WordPress Duplicate Post, Page and Any Custom Post plugin <= 3.5.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication vulnerability

Authenticated Contributor+ Post Disclosure via Post Duplication vulnerability discovered by Webbernaut in WordPress Plugin Duplicate Post, Page and Any Custom Post versions = 3.5.5...

4.3CVSS6.8AI score0.00328EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/06 12:00 a.m.10 views

PT-2025-16577

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the initialization of legacy client tracking in the Linux kernel's nfsd component. The problem arises from the duplicate call to nfsd4 legacy tracking ops-init,...

7.8CVSS7.3AI score0.66418EPSS
SaveExploits13References248
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2026-4771

Name of the Vulnerable Software and Affected Versions eslint versions prior to 9.26.0 Description A stack overflow issue exists in eslint when serializing objects containing circular references within the eslint/lib/shared/serialization.js file. The issue is triggered through the RuleTester.run...

5.5CVSS5.4AI score0.00163EPSS
SaveExploits1References16
SQLite
SQLite
added 2025/01/01 12:00 a.m.13 views

SQLite report about CVE-2025-52099

Duplicate of CVE-2025-29088...

7AI score0.00047EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2024/12/29 2:24 p.m.17 views

CVE-2024-53172

In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since commit 4c39529663b9 "slab: Warn on duplicate cache names when DEBUGVM=y", the duplicate slab cache names can be detected and a kernel WARNING is thrown out. In UB...

5.5CVSS6.7AI score0.00247EPSS
SaveExploits0References4
Rows per page
Query Builder