Lucene search
+L

11774 matches found

Positive Technologies
Positive Technologies
added 2023/05/28 12:00 a.m.14 views

PT-2023-10169 · WordPress · Portfolio Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Portfolio Gallery Plugin versions up to 1.1.8 Description: A critical vulnerability has been found in the Portfolio Gallery Plugin on WordPress, affecting an unknown part. The manipulation leads to sql injection and can be initiated remotely...

9.8CVSS7.5AI score0.00707EPSS
SaveExploits0References8
OSV
OSV
added 2023/05/26 5:15 p.m.10 views

CVE-2023-31225

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability...

3.3CVSS5.8AI score0.00104EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/05/26 5:15 p.m.4 views

CVE-2023-31225

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability...

3.3CVSS5.9AI score0.00104EPSS
SaveExploits0References2Affected Software2
NVD
NVD
added 2023/05/26 5:15 p.m.39 views

CVE-2023-31225

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability...

3.3CVSS4.1AI score0.00104EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/26 5:15 p.m.35 views

Design/Logic Flaw

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability...

1.9CVSS4.3AI score0.00104EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/26 12:00 a.m.10 views

CVE-2023-31225

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability...

6.9AI score0.00104EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/26 12:00 a.m.64 views

CVE-2023-31225

Technical details about CVE-2023-31225 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

3.3CVSS4.3AI score0.00104EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/26 12:00 a.m.45 views

CVE-2023-31225

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability...

4.4AI score0.00104EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/26 12:00 a.m.9 views

PT-2023-23246 · Unknown · Gallery App

Name of the Vulnerable Software and Affected Versions: Gallery app affected versions not specified Description: The issue concerns the risk of hijacking attacks, which may lead to download failures and impact product availability. Recommendations: At the moment, there is no information about a...

3.3CVSS6.9AI score0.00104EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/05/24 12:00 a.m.18 views

WordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Flickr Justified Gallery Type Plugin Vulnerable versions = 3.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25473 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e930ab154fff Credits Mika Required...

8.8CVSS6.6AI score0.00248EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/05/24 12:00 a.m.16 views

Flickr Justified Gallery <= 3.5 - Cross-Site Request Forgery

The plugin does not properly validate incoming requests using nonces, leading to a potential Cross-Site Request Forgery CSRF vulnerability...

8.8CVSS6.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/05/23 2:15 p.m.12 views

CVE-2023-23705

Cross-Site Request Forgery CSRF vulnerability in HM Plugin WordPress Books Gallery plugin = 4.4.8 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/23 2:15 p.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in HM Plugin WordPress Books Gallery plugin = 4.4.8 versions...

6.8CVSS8.7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/23 1:03 p.m.28 views

CVE-2023-23705 WordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in HM Plugin WordPress Books Gallery plugin = 4.4.8 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/23 1:03 p.m.51 views

CVE-2023-23705

CVE-2023-23705 affects the HM Plugin WordPress Books Gallery plugin, versions

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/23 12:00 a.m.11 views

WordPress plugin WordPress Books Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Books Gallery...

8.8CVSS8.1AI score0.00256EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/23 12:00 a.m.40 views

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo version 13.6.0, which stems from a problem with the configuration file functionality and can...

9.8CVSS8.5AI score0.09058EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.13 views

PT-2023-19144 · WordPress · Hm Plugin Wordpress Books Gallery

Name of the Vulnerable Software and Affected Versions: HM Plugin WordPress Books Gallery plugin versions = 4.4.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...

8.8CVSS8.8AI score0.00256EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/05/22 12:00 a.m.11 views

WordPress Unite Gallery Lite Plugin <= 1.7.59 is vulnerable to Local File Inclusion

Software Unite Gallery Lite Type Plugin Vulnerable versions = 1.7.59 Fixed in 1.7.60 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-33310 Patch priority Low CVSS severity Low 6 Developer Claim ownership PSID 48cbd93fa977 Credits yuyudhn Required privilege Administrato...

6CVSS6.9AI score0.0068EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/05/20 11:15 p.m.20 views

CVE-2022-47134

Cross-Site Request Forgery CSRF vulnerability in Bill Erickson Gallery Metabox plugin = 1.5 versions...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Rows per page
Query Builder