Lucene search
+L

363 matches found

Positive Technologies
Positive Technologies
added 2024/03/30 12:00 a.m.13 views

PT-2024-18770 · Google · Google Drive

Name of the Vulnerable Software and Affected Versions: Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site plugin for WordPress versions up to, and including, 1.3.8 Description: The plugin is vulnerable to...

10CVSS9.4AI score0.00733EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/30 12:00 a.m.9 views

WordPress Plugin Integrate Google Drive 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

10CVSS8.2AI score0.00733EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2024/03/29 12:00 a.m.17 views

Integrate Google Drive < 1.3.9 - Missing Authorization to Unauthenticated Settings Modification and Export

Description The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check o...

10CVSS6.4AI score0.00733EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2024/03/06 9:48 a.m.35 views

How to Find and Fix Risky Sharing in Google Drive

Every Google Workspace administrator knows how quickly Google Drive becomes a messy sprawl of loosely shared confidential information. This isn't anyone's fault; it's inevitable as your productivity suite is purposefully designed to enable real-time collaboration – both internally and externally...

6.8AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2024/01/03 12:00 a.m.16 views

Integrate Google Drive < 1.3.4 - Subscriber+ Settings Update

Description The plugin does not have authorisation check when updating its settings, which could allow any authenticated users, such as subscriber to update them...

6.6AI score0.00298EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/29 12:00 a.m.14 views

WordPress Integrate Google Drive Plugin <= 1.3.3 is vulnerable to Broken Access Control

Software Integrate Google Drive Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-52177 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID fa1d3224192c Credits Nguyen Xuan Chien...

6.3CVSS6.5AI score0.00298EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/12/17 10:15 a.m.31 views

CVE-2023-49769

Cross-Site Request Forgery CSRF vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4...

8.8CVSS0.00259EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/17 10:15 a.m.11 views

CVE-2023-49769

Cross-Site Request Forgery CSRF vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4...

8.8CVSS5.8AI score0.00259EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/17 10:15 a.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4...

6.8CVSS7.2AI score0.00259EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/17 9:58 a.m.82 views

CVE-2023-49769

CVE-2023-49769 is a CSRF vulnerability in the WordPress plugin Integrate Google Drive (Integrate Google Drive) affecting versions up to 1.3.4. The issue arises from insufficient CSRF protection (nonce validation not adequately enforced), allowing unauthenticated forgery of actions. Remediation: u...

8.8CVSS8.5AI score0.00259EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/17 9:58 a.m.34 views

CVE-2023-49769 WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4...

4.3CVSS8.8AI score0.00259EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/17 12:00 a.m.7 views

WordPress Plugin Integrate Google Drive Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.5AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/17 12:00 a.m.12 views

PT-2023-31338 · Softlab · Softlab Integrate Google Drive

Name of the Vulnerable Software and Affected Versions: SoftLab Integrate Google Drive versions 1.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

8.8CVSS8.7AI score0.00259EPSS
SaveExploits0References7
Fedora
Fedora
added 2023/12/16 1:26 a.m.32 views

[SECURITY] Fedora 38 Update: PyDrive2-1.18.0-1.fc38

Google Drive API Python wrapper library. Maintained fork of PyDrive...

7.8CVSS7AI score0.0051EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2023/12/16 12:00 a.m.12 views

Fedora: Security Advisory (FEDORA-2023-8e70979de3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.7AI score0.0051EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2023/12/16 12:00 a.m.22 views

Fedora: Security Advisory for PyDrive2 (FEDORA-2023-21d2191c73)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0051EPSS
SaveExploits1References2
Fedora
Fedora
added 2023/12/15 7:04 p.m.36 views

[SECURITY] Fedora 39 Update: PyDrive2-1.18.0-1.fc39

Google Drive API Python wrapper library. Maintained fork of PyDrive...

7.8CVSS7AI score0.0051EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2023/12/15 12:00 a.m.21 views

Fedora 38 : PyDrive2 (2023-21d2191c73)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-21d2191c73 advisory. Update to 1.18 and security fix for CVE-2023-49297 Tenable has extracted the preceding description block directly from the Fedora security advisory...

7.8CVSS7.4AI score0.0051EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2023/12/15 12:00 a.m.16 views

Fedora 39 : PyDrive2 (2023-8e70979de3)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8e70979de3 advisory. Update to 1.18 and security fix for CVE-2023-49297 Tenable has extracted the preceding description block directly from the Fedora security advisory...

7.8CVSS7.4AI score0.0051EPSS
SaveExploits1References2
Fedora
Fedora
added 2023/12/13 1:34 a.m.32 views

[SECURITY] Fedora 38 Update: libcmis-0.6.2-1.fc38

LibCMIS is a C/C++ client library for working with CM content management interfaces. The primary supported interface which gave the library its name is CMIS, which allows applications to connect to any ECM behaving as a CMIS server Alfresco or Nuxeo are examples of open source ones. Another...

8.8CVSS8.3AI score0.01017EPSS
SaveExploits0
Rows per page
Query Builder