Lucene search
+L

2936 matches found

CNNVD
CNNVD
•added 2024/06/04 12:00 a.m.•21 views

WordPress plugin Hide My WP Ghost 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...

5.3CVSS6.8AI score0.00479EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•4 views

CVE-2023-34001: Improper Restriction of Excessive Authentication Attempts

Improper Restriction of Excessive Authentication Attempts vulnerability in WPPlugins – WordPress Security Plugins Hide My WP Ghost allows Functionality Bypass.This issue affects Hide My WP Ghost: from n/a through 5.0.25...

5.3CVSS7.3AI score0.00479EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/04 12:00 a.m.•6 views

PT-2024-12458

Name of the Vulnerable Software and Affected Versions Hide My WP Ghost versions through 5.0.25 Description The issue is related to an Improper Restriction of Excessive Authentication Attempts vulnerability in Hide My WP Ghost, a WordPress security plugin. This vulnerability allows Functionality...

5.3CVSS5.9AI score0.00479EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2024/05/31 12:00 a.m.•22 views

The vulnerability of the Ghost content management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Ghost content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by sending a specially created malicious SVG file containing JavaScript code to port...

4CVSS7.7AI score0.03485EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2024/05/29 12:25 p.m.•62 views

CVE-2023-52881

A flaw was found in the Linux kernel. Two TCP spoofing primitives exist where an attacker can brute force the server-chosen send window by acknowledging data that was never sent, called "ghost ACKs." There are side channels that also allow the attacker to leak the otherwise secret server-chosen...

5.9CVSS6.3AI score0.00611EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2024/05/28 3:30 p.m.•9 views

SUSE CVE-2021-47490

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix memleak in ttmtransfereddestroy We need to cleanup the fences for ghost objects as well. Bug: https://bugzilla.kernel.org/showbug.cgi?id=214029 Bug: https://bugzilla.kernel.org/showbug.cgi?id=214447...

4.7CVSS6.5AI score0.00208EPSS
SaveExploits0References8
Veracode
Veracode
•added 2024/05/24 7:58 a.m.•28 views

CSV Injection

Ghost is vulnerable to CSV Injection. The vulnerability is due to inadequate input sanitization during member CSV export, allowing malicious content to be injected into CSV files, and executed when opened by a spreadsheet application...

8.8CVSS7AI score0.00729EPSS
SaveExploits2References3Affected Software2
OSV
OSV
•added 2024/05/24 7:18 a.m.•64 views

BIT-GHOST-2024-34559

Insertion of Sensitive Information into Log File vulnerability in Ghost Foundation Ghost.This issue affects Ghost: from n/a through 1.4.0...

7.5CVSS7.5AI score0.00721EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/05/22 6:30 p.m.•42 views

Ghost allows CSV Injection during member CSV export

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

8.8CVSS7.2AI score0.00729EPSS
SaveExploits2References4Affected Software1
OSV
OSV
•added 2024/05/22 6:30 p.m.•55 views

GHSA-XGWH-CGV9-783V Ghost allows CSV Injection during member CSV export

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

8.8CVSS8.8AI score0.00729EPSS
SaveExploits2References4
NVD
NVD
•added 2024/05/22 4:15 p.m.•39 views

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

8.8CVSS6.9AI score0.00729EPSS
SaveExploits2References1
OSV
OSV
•added 2024/05/22 4:01 p.m.•16 views

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

8.8CVSS8.8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/05/22 4:01 p.m.•15 views

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

7.2AI score0.00729EPSS
SaveExploits2References1
Mend
Mend
•added 2024/05/22 4:01 p.m.•5 views

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

8.8CVSS0.00729EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2024/05/22 4:01 p.m.•70 views

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

6.8AI score0.00729EPSS
SaveExploits2References1
CVE
CVE
•added 2024/05/22 4:01 p.m.•104 views

CVE-2024-34448

Ghost versions prior to 5.82.0 are vulnerable to CSV Injection during a member CSV export. The root cause is inadequate input sanitization , which allows an attacker to inject malicious content into exported CSV files. This content can then be executed when the file is opened by a spreadsheet app...

8.8CVSS7.1AI score0.00729EPSS
SaveExploits2References1Affected Software1
OSV
OSV
•added 2024/05/22 9:15 a.m.•9 views

DEBIAN-CVE-2021-47490

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix memleak in ttmtransfereddestroy We need to cleanup the fences for ghost objects as well. Bug: https://bugzilla.kernel.org/showbug.cgi?id=214029 Bug: https://bugzilla.kernel.org/showbug.cgi?id=214447...

5.5CVSS5.1AI score0.00208EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/22 9:15 a.m.•18 views

UBUNTU-CVE-2021-47490

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix memleak in ttmtransfereddestroy We need to cleanup the fences for ghost objects as well. Bug: https://bugzilla.kernel.org/showbug.cgi?id=214029 Bug: https://bugzilla.kernel.org/showbug.cgi?id=214447...

5.5CVSS5.8AI score0.00208EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2024/05/22 9:15 a.m.•27 views

CVE-2021-47490

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix memleak in ttmtransfereddestroy We need to cleanup the fences for ghost objects as well. Bug: https://bugzilla.kernel.org/showbug.cgi?id=214029 Bug: https://bugzilla.kernel.org/showbug.cgi?id=214447...

5.5CVSS5.9AI score0.00208EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2024/05/22 8:19 a.m.•36 views

CVE-2021-47490 drm/ttm: fix memleak in ttm_transfered_destroy

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix memleak in ttmtransfereddestroy We need to cleanup the fences for ghost objects as well. Bug: https://bugzilla.kernel.org/showbug.cgi?id=214029 Bug: https://bugzilla.kernel.org/showbug.cgi?id=214447...

6.5AI score0.00208EPSS
SaveExploits0References2
Rows per page
Query Builder