Lucene search
+L

16840 matches found

CVE
CVE
added 2025/04/17 3:15 p.m.62 views

CVE-2025-39453

CVE-2025-39453: CSRF in Advanced Dynamic Pricing for WooCommerce (algol.plus) affects versions n/a through 4.9.3. Root cause is Cross-Site Request Forgery enabling unauthorized actions when a logged-in user interacts with the vulnerable plugin. Impact is limited to integrity/availability as per s...

4.3CVSS7.2AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/17 3:15 p.m.45 views

CVE-2025-39453 WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.9.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in algol.plus Advanced Dynamic Pricing for WooCommerce advanced-dynamic-pricing-for-woocommerce allows Cross Site Request Forgery.This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through = 4.9.3...

4.3CVSS0.00158EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/04/17 12:00 a.m.8 views

DYNAMITE: Dynamic Defense Selection for Enhancing Machine Learning-Based Intrusion Detection against Adversarial Attacks

The rapid proliferation of the Internet of Things IoT has introduced substantial security vulnerabilities, highlighting the need for robust Intrusion Detection Systems IDS. Machine learning-based intrusion detection systems ML-IDS have significantly improved threat detection capabilities; however...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.9 views

WordPress plugin Advanced Dynamic Pricing for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

4.3CVSS5.9AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.9 views

OpenText Secure Content Manager 代码问题漏洞

OpenText Secure Content Manager is an enterprise content management solution from OpenText Canada. A code issue vulnerability exists in OpenText Secure Content Manager version 23.4, which originates from a DLL side load and could lead to the execution of arbitrary code...

7CVSS7.1AI score0.00178EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/16 2:07 p.m.10 views

WordPress Dynamic Post plugin <= 5.02 - Settings Change Vulnerability

Settings Change Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Dynamic Post versions = 5.02...

5.4CVSS8.3AI score0.0042EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/04/16 1:15 p.m.8 views

CVE-2025-39522

Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Post: from n/a through = 5.03...

5.4CVSS0.0042EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/16 12:45 p.m.51 views

CVE-2025-39522

CVE-2025-39522 describes a Missing Authorization vulnerability in the WordPress plugin Dynamic Post , allow­ing an attacker to exploit an incorrectly configured access control to change settings. Affected software: Dynamic Post versions up to 4.10 (per the CVE description). Root cause: lack of pr...

5.4CVSS7.2AI score0.0042EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:45 p.m.7 views

CVE-2025-39522 WordPress Dynamic Post <= 4.10 - Settings Change Vulnerability

Missing Authorization vulnerability in Sebastian Lee Dynamic Post allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Dynamic Post: from n/a through 4.10...

5.4CVSS7.1AI score0.0042EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/16 12:45 p.m.22 views

CVE-2025-39522 WordPress Dynamic Post plugin <= 5.03 - Settings Change vulnerability

Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Post: from n/a through = 5.03...

5.4CVSS0.0042EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/16 12:00 a.m.14 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.00295EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

WordPress plugin Dynamic Post 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS6.4AI score0.0042EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/04/16 12:00 a.m.17 views

Provable Secure Steganography Based on Adaptive Dynamic Sampling

The security of private communication is increasingly at risk due to widespread surveillance. Steganography, a technique for embedding secret messages within innocuous carriers, enables covert communication over monitored channels. Provably Secure Steganography PSS is state of the art for making...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2025/04/15 12:00 a.m.10 views

BleachBit 代码问题漏洞

BleachBit is a free open source disk space cleaner, privacy manager and computer system optimizer from BleachBit Open Source. A code issue vulnerability exists in BleachBit 4.6.2 and earlier versions that stems from DLL hijacking and could lead to the execution of arbitrary code...

7.3CVSS7AI score0.00235EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/14 12:15 p.m.7 views

CVE-2024-13598

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS Cross-site Scripting attacks. Using a functionality of creating new form fields one creates new parameters vulnerable to XSS attacks. A user tricked into filling such a form with a malicious script will run th...

6.1CVSS5.8AI score0.00231EPSS
SaveExploits0References2
AlmaLinux
AlmaLinux
added 2025/04/14 12:00 a.m.19 views

Important: gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes:...

7.5CVSS7.2AI score0.00905EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/04/11 12:00 a.m.17 views

The vulnerability of the Remote Desktop Client for Windows operating systems in relation to client exploitation, involving buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.3AI score0.0141EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.14 views

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00601EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.9 views

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00601EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.10 views

The vulnerability of the Microsoft Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Windows operating system’s Telephony Service is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01278EPSS
SaveExploits0References3
Rows per page
Query Builder