Lucene search
+L

111 matches found

ATTACKERKB
ATTACKERKB
added 2023/11/06 12:15 p.m.5 views

CVE-2023-46776

A vulnerability in J0SiE Auto Excerpt everywhere auto-excerpt-everywhere.This issue affects Auto Excerpt everywhere: from n/a through = 1.5...

8.8CVSS8.5AI score0.00216EPSS
Exploits0References3
OSV
OSV
added 2023/11/06 12:15 p.m.6 views

CVE-2023-46776

Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...

8.8CVSS7.3AI score0.00216EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.5 views

WordPress Plugin auto-excerpt-everywhere Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00216EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.26 views

Fedora: Security Advisory (FEDORA-2023-035866b576)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.01695EPSS
Exploits3References5
OpenVAS
OpenVAS
added 2023/10/20 12:0 a.m.19 views

Fedora: Security Advisory for icecat (FEDORA-2023-7342330743)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.01695EPSS
Exploits3References2
Fedora
Fedora
added 2023/10/18 1:46 a.m.42 views

[SECURITY] Fedora 38 Update: icecat-115.3.1-7.rh2.fc38

GNU IceCat is the GNU version of the Firefox ESR browser. Extensions included to this version of IceCat: LibreJS GNU LibreJS aims to address the JavaScript problem described in the article "The JavaScript Trap" of Richard Stallman. HTTPS Everywhere HTTPS Everywhere is an extension that encrypts...

5.3CVSS5.7AI score0.01695EPSS
Exploits3
Patchstack
Patchstack
added 2023/07/26 12:0 a.m.13 views

WordPress PHP Everywhere Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)

Software PHP Everywhere Type Plugin Vulnerable versions = 2.0.3 Fixed in 3.0.0 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2022-24663 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 39f7e97ee70f Credits Ramuel Gall Required privilege...

9.9CVSS7.1AI score0.02047EPSS
Exploits2References2Affected Software1
Patchstack
Patchstack
added 2023/07/26 12:0 a.m.15 views

WordPress PHP Everywhere Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)

Software PHP Everywhere Type Plugin Vulnerable versions = 2.0.3 Fixed in 3.0.0 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2022-24664 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 03f2a970e135 Credits Ramuel Gall Required privilege...

9.9CVSS7.2AI score0.0165EPSS
Exploits2References2Affected Software1
Patchstack
Patchstack
added 2023/07/26 12:0 a.m.16 views

WordPress PHP Everywhere Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)

Software PHP Everywhere Type Plugin Vulnerable versions = 2.0.3 Fixed in 3.0.0 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2022-24665 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 613af699ce95 Credits Ramuel Gall Required privilege...

9.9CVSS7.2AI score0.026EPSS
Exploits3References2Affected Software1
Openbugbounty
Openbugbounty
added 2022/07/07 12:31 a.m.15 views

everywherecatering.com Cross Site Scripting vulnerability OBB-2737435

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:16 p.m.4 views

Malicious code in mwembed-dash-everywhere (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b564441937b7693ebbf08a6d629cfb0eb246e7be18bcf10818964d72f26892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:16 p.m.7 views

MAL-2022-4742 Malicious code in mwembed-dash-everywhere (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b564441937b7693ebbf08a6d629cfb0eb246e7be18bcf10818964d72f26892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
NVD
NVD
added 2022/06/07 6:15 p.m.18 views

CVE-2020-36537

A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

8.8CVSS0.00611EPSS
Exploits0References1
Prion
Prion
added 2022/06/07 6:15 p.m.13 views

Sql injection

A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

6.5CVSS8.9AI score0.00611EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/06/07 12:0 a.m.3 views

Everywhere CMS SQL注入漏洞

Everywhere CMS is a content management system from Everywhere, Inc. A security vulnerability exists in Everywhere CMS, which stems from an sql injection issue caused by manipulation of the parameter id...

8.8CVSS7.9AI score0.00611EPSS
Exploits0References2
CVE
CVE
added 2022/06/03 7:10 p.m.38 views

CVE-2020-36537

Everywhere CMS is affected by a SQL injection vulnerability triggered by manipulation of the id parameter. The attack surface is the Everywhere CMS component reference to an unknown function, with remote exploit possible. Details across connected sources consistently classify the issue as critica...

8.8CVSS7.8AI score0.00611EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/03 7:10 p.m.22 views

CVE-2020-36537 Everywhere CMS sql injection

A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

6.3CVSS9AI score0.00611EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/03/23 12:0 a.m.7 views

Fedora: Security Advisory for icecat (FEDORA-2022-42ea499a7d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/22 12:0 a.m.25 views

PHP Everywhere Plugin for WordPress < 3.0.0 Remote Code Execution

The WordPress PHP Everywhere Plugin installed on the remote host is affected by multiple remote code execution vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

9.9CVSS9.5AI score0.026EPSS
Exploits3References5
BDU FSTEC
BDU FSTEC
added 2022/02/22 12:0 a.m.9 views

The vulnerability of the wp_ajax_parse_media_shortcode() function in the PHP plugin for implementing PHP Everywhere allows a hacker to execute arbitrary code.

The vulnerability of the wpajaxparsemediashortcode function in the PHP plugin for implementing PHP Everywhere is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

9.9CVSS8.3AI score0.02047EPSS
Exploits2References4Affected Software1
Rows per page
Query Builder