Lucene search
+L

2625 matches found

Positive Technologies
Positive Technologies
added 2024/09/13 12:0 a.m.12 views

PT-2024-39209 · WordPress · Exit Notifier

Name of the Vulnerable Software and Affected Versions: Exit Notifier plugin for WordPress versions up to, and including, 1.9.1 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows unauthenticated...

6.1CVSS6.5AI score0.00381EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/09/13 12:0 a.m.10 views

WordPress plugin Exit Notifier 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.8AI score0.00381EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/12 12:0 a.m.6 views

The vulnerability of the zipfile module in the Python programming language allows a hacker to trigger a service failure.

The vulnerability of the zipfile module in the Python programming language is related to a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause service failures...

5.4CVSS6.7AI score0.01264EPSS
SaveExploits0References20Affected Software5
OSV
OSV
added 2024/09/08 6:15 a.m.4 views

CVE-2024-6855

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack...

4.3CVSS5.8AI score0.00201EPSS
SaveExploits1References1
NVD
NVD
added 2024/09/08 6:15 a.m.32 views

CVE-2024-6855

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack...

6.5CVSS0.00201EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/09/08 6:0 a.m.17 views

CVE-2024-6855 WP MultiTasking <= 0.1.12 - Exit Popup Update via CSRF

The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could allow attackers to make logged admins perform such action via a CSRF attack...

6.5AI score0.00201EPSS
SaveExploits1References1
CVE
CVE
added 2024/09/08 6:0 a.m.53 views

CVE-2024-6855

The CVE-2024-6855 issue affects the WP MultiTasking (WP Utilities) WordPress plugin, specifically versions

6.5CVSS4.6AI score0.00201EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/09/08 12:0 a.m.10 views

WordPress plugin WP MultiTasking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS6.8AI score0.00201EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2024/09/07 3:38 a.m.4 views

SUSE CVE-2023-52914

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: add hash if ready poll request can't complete inline If we don't, then we may lose access to it completely, leading to a request leak. This will eventually stall the ring exit process as well...

5.5CVSS6.5AI score0.00205EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/09/05 2:46 a.m.7 views

SUSE CVE-2024-44991

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

5.5CVSS6.4AI score0.00245EPSS
SaveExploits0References11
OSV
OSV
added 2024/09/04 8:15 p.m.4 views

DEBIAN-CVE-2024-44991

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

5.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/09/04 8:15 p.m.17 views

CVE-2024-44991

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

5.5CVSS6.6AI score0.00245EPSS
SaveExploits0References11
OSV
OSV
added 2024/09/04 8:15 p.m.17 views

UBUNTU-CVE-2024-44991

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

5.5CVSS6.6AI score0.00245EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2024/09/04 7:54 p.m.20 views

CVE-2024-44991 tcp: prevent concurrent execution of tcp_sk_exit_batch

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

7AI score0.00245EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/09/04 7:24 a.m.6 views

kernel: userfaultfd: fix a race between writeprotect and exit_mmap()

A possible race condition flaw was found in the Linux kernel. When a process exits, its virtual memory areas VMAs are removed by exitmmap, and at the same time, userfaultfdwriteprotect is called...

4.7CVSS7.2AI score0.00164EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/09/04 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible concurrent execution of the tcpskexitbatch function of the tcp component...

5.5CVSS6.5AI score0.00245EPSS
SaveExploits0References6
Redos
Redos
added 2024/09/04 12:0 a.m.341 views

ROS-20240904-07

A vulnerability in the Python programming language interpreter CPython is related to a loop with an unreachable exit condition. exit condition. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

8.7CVSS6.6AI score0.01264EPSS
SaveExploits0
OSV
OSV
added 2024/08/26 12:15 p.m.5 views

UBUNTU-CVE-2024-44938

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG When searching for the next smaller log2 block, BLKSTOL2 returned 0, causing shift exponent -1 to be negative. This patch fixes the issue by exiting the loop directly when negative shif...

5.5CVSS6.2AI score0.00224EPSS
SaveExploits0References39
SUSE CVE
SUSE CVE
added 2024/08/23 2:53 a.m.6 views

SUSE CVE-2022-48935

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: unregister flowtable hooks on netns exit Unregister flowtable hooks before they are releases via nftablesflowtabledestroy otherwise hook core reports UAF. BUG: KASAN: use-after-free in...

5.5CVSS6.3AI score0.00204EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2024/08/22 3:16 p.m.23 views

CVE-2022-48935

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: unregister flowtable hooks on netns exit Unregister flowtable hooks before they are releases via nftablesflowtabledestroy otherwise hook core reports UAF. BUG: KASAN: use-after-free in...

5.5CVSS6AI score0.00204EPSS
SaveExploits0References4
Rows per page
Query Builder