Lucene search
+L

488 matches found

Patchstack
Patchstack
added 2024/04/11 12:00 a.m.14 views

WordPress Event Manager for WooCommerce Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Event Manager for WooCommerce Type Plugin Vulnerable versions = 4.1.2 Fixed in 4.1.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32110 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d7bf2c59ce4e Credits...

6AI score0.001EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/04/10 1:15 a.m.10 views

CVE-2024-3526

A vulnerability has been found in Campcodes Online Event Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely...

5.4CVSS3.8AI score0.00642EPSS
SaveExploits1References4
OSV
OSV
added 2024/04/09 11:15 p.m.6 views

CVE-2024-3523

A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

8.8CVSS5.8AI score0.00675EPSS
SaveExploits1References4
NVD
NVD
added 2024/03/13 4:15 p.m.25 views

CVE-2024-0976

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the plugin parameter in all versions up to, and including, 3.1.41 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS6AI score0.00592EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/13 4:15 p.m.11 views

CVE-2024-0976

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the plugin parameter in all versions up to, and including, 3.1.41 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS7.4AI score0.00592EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/13 3:26 p.m.37 views

CVE-2024-0976 WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the plugin parameter in all versions up to, and including, 3.1.41 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS6.2AI score0.00592EPSS
SaveExploits0References3
CVE
CVE
added 2024/03/13 3:26 p.m.66 views

CVE-2024-0976

The CVE concerns WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce (WordPress) up to version 3.1.41, which is vulnerable to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping in a plugin parameter. Unauthenticated attackers cou...

6.1CVSS6.4AI score0.00592EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/13 3:26 p.m.18 views

CVE-2024-0976

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the plugin parameter in all versions up to, and including, 3.1.41 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS6.3AI score0.00592EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.10 views

WordPress Plugin WP Event Manager Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS6.2AI score0.00592EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/03/04 12:00 a.m.18 views

The vulnerability of the SolarWinds Security Event Manager (SEM), previously known as SolarWinds Log & Event Manager, related to deserialization flaws, allows a hacker to execute arbitrary code.

The vulnerability of the Security Event Manager SEM, a software tool for monitoring network infrastructure formerly known as SolarWinds Log & Event Manager, is related to deficiencies in the deserialization mechanism when processing AMF Action Message Format data. Exploiting this vulnerability...

8.8CVSS8.1AI score0.92245EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2024/03/01 9:15 a.m.29 views

CVE-2024-0692

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution...

8.8CVSS9.3AI score0.92245EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/01 9:15 a.m.14 views

CVE-2024-0692

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution...

8.8CVSS6.1AI score0.92245EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/03/01 8:55 a.m.42 views

CVE-2024-0692 SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution...

8.8CVSS9.5AI score0.92245EPSS
SaveExploits1References2
CVE
CVE
added 2024/03/01 8:55 a.m.161 views

CVE-2024-0692

SolarWinds Security Event Manager (SEM) is affected by CVE-2024-0692 due to a deserialization of untrusted data in the AMF mechanism, enabling unauthenticated remote code execution on adjacent networks. Public sources in connected documents confirm an unauthenticated RCE condition with a high imp...

8.8CVSS9.3AI score0.92245EPSS
SaveIn wildExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/01 8:55 a.m.20 views

CVE-2024-0692 SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution...

8.8CVSS8.3AI score0.92245EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/01 12:00 a.m.17 views

SolarWinds Security Event Manager Code Issue Vulnerability

SolarWinds Security Event Manager SolarWinds SEM is an American SolarWinds, Inc. for forensics and troubleshooting, as well as a tool to help you manage log data. A code issue vulnerability exists in SolarWinds Security Event Manager that stems from allowing an unauthenticated user to abuse...

8.8CVSS8AI score0.92245EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2024/02/26 12:00 a.m.18 views

WordPress WP Event Manager Plugin <= 3.1.41 is vulnerable to Cross Site Scripting (XSS)

Software WP Event Manager Type Plugin Vulnerable versions = 3.1.41 Fixed in 3.1.42 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0976 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 31df306c3173 Credits Maksim Kosenko...

6.1CVSS5.6AI score0.00592EPSS
SaveExploits0References3Affected Software1
WPVulnDB
WPVulnDB
added 2024/02/23 12:00 a.m.22 views

WP Event Manager < 3.1.42 - Reflected Cross-Site Scripting via plugin

Description The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the plugin parameter in all versions up to, and including, 3.1.41 due to insufficient input sanitization and output escaping...

6.1CVSS6.1AI score0.00592EPSS
SaveExploits0References1Affected Software1
Fedora
Fedora
added 2024/02/14 1:13 a.m.18 views

[SECURITY] Fedora 38 Update: rust-event-manager-0.4.0-2.fc38

Abstractions for implementing event based systems...

9.8CVSS7.4AI score0.00652EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/02/14 12:00 a.m.15 views

Fedora: Security Advisory for rust-event-manager (FEDORA-2024-f2305d485f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.00652EPSS
SaveExploits0References2
Rows per page
Query Builder