Lucene search
+L

8365 matches found

Patchstack
Patchstack
•added 2025/04/15 6:49 a.m.•19 views

WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Barcode Generator for WooCommerce versions = 2.0.4...

7.5CVSS8.4AI score0.00385EPSS
SaveExploits0Affected Software1
Veracode
Veracode
•added 2025/04/15 3:40 a.m.•22 views

Remote Code Execution (RCE)

generator-jhipster-entity-audit is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe reflection caused by using Javers as the Entity Audit Framework, which allows malicious classes on the classpath to be exploited through exposed REST endpoints...

7.6CVSS7.3AI score0.00537EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•24 views

ssh-agent SSH DoS

The vulnerability of the SSH client ssh-agent on Jenkins automation servers is related to errors in the code of the pseudorandom number generator used for generating host keys. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...

9.4CVSS5.8AI score0.00477EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•17 views

WordPress plugin Barcode Generator for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•20 views

PT-2025-16334 · Woocommerce · Barcode Generator For Woocommerce

Name of the Vulnerable Software and Affected Versions: Barcode Generator for WooCommerce versions 2.0.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This affects the Barcode...

7.5CVSS7.8AI score0.00385EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•8 views

CVE-2025-32929: Missing Authorization

Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Barcode Generator for WooCommerce: from n/a through ...

7.5CVSS5.9AI score0.00385EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•30 views

Jenkins SSH Client SSH Slave MITM

The vulnerability of the SSH client ssh-slave in Jenkins automation servers is related to errors in the code of the pseudorandom number generator used for generating host keys. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...

9.4CVSS5.8AI score0.00477EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/12 8:58 a.m.•44 views

CVE-2025-32228

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Retrieve Embedded Sensitive Data.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.9...

4.3CVSS7.2AI score0.00293EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2025/04/12 12:00 a.m.•16 views

p5-Crypt-CBC -- Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Lib-Crypt-CBC project reports: Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case...

4CVSS7.3AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/10 8:15 a.m.•43 views

CVE-2025-32228

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Retrieve Embedded Sensitive Data.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.9...

4.3CVSS0.00293EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/10 8:09 a.m.•81 views

CVE-2025-32228

CVE-2025-32228 affects the WP Messiah Ai Image Alt Text Generator for WP and is described as Exposure of Sensitive System Information to an Unauthorized Control Sphere. The vulnerability applies to the plugin for WordPress, affecting versions from n/a up to 1.0.8. According to the connected Red H...

4.3CVSS7.2AI score0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/10 8:09 a.m.•46 views

CVE-2025-32228 WordPress Ai Image Alt Text Generator for WP plugin <= 1.1.9 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Retrieve Embedded Sensitive Data.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.9...

4.3CVSS0.00293EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/10 12:00 a.m.•9 views

CVE-2025-32228: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Retrieve Embedded Sensitive Data.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.9...

4.3CVSS5.8AI score0.00293EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•17 views

Crypt-Random rand() Random Number Generation

The vulnerability of the rand function in the Crypt-Random random number generation module for Perl is related to errors in the code of the pseudo-random number generator. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

10CVSS5.6AI score0.00407EPSS
SaveExploits0References7Affected Software1
Debian
Debian
•added 2025/04/08 7:35 a.m.•36 views

[SECURITY] [DLA 4120-1] libnet-easytcp-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4120-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura April 08, 2025 https://wiki.debian.org/LTS -...

5.4CVSS6.8AI score0.00391EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/04/08 12:00 a.m.•24 views

Debian dla-4120 : libnet-easytcp-perl - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4120 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4120-1 [email protected] https://www.debian.org/lts/security/...

5.4CVSS5.7AI score0.00391EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/04/05 7:29 p.m.•38 views

CVE-2025-31119

generator-jhipster-entity-audit is a JHipster module to enable entity audit and audit log page. Prior to 5.9.1, generator-jhipster-entity-audit allows unsafe reflection when having Javers selected as Entity Audit Framework. If an attacker manages to place some malicious classes into the classpath...

7.6CVSS7.9AI score0.00537EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/05 5:23 p.m.•39 views

CVE-2025-3168

A vulnerability was found in PHPGurukul Time Table Generator System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php. The manipulation of the argument editid leads to sql injection. The attack can be launched...

9.8CVSS7.7AI score0.00562EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/05 4:15 p.m.•29 views

CVE-2024-57835

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand function, which is not cryptographically secure...

5.5CVSS0.00287EPSS
SaveExploits0References4
CVE
CVE
•added 2025/04/05 4:11 p.m.•93 views

CVE-2024-57835

The Amon2::Auth::Site::LINE Perl component (versions up to 0.04 ) is vulnerable to the use of a predictable random number generator . The software utilizes the String::Random module to generate nonce values ; however, this module defaults to Perl's built-in rand() function, which is not cryptogra...

5.5CVSS6.6AI score0.00287EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder