Lucene search
+L

412 matches found

WPVulnDB
WPVulnDB
•added 2023/12/09 12:00 a.m.•24 views

Integrate Google Drive < 1.3.5 - Cross-Site Request Forgery

Description The Integrate Google Drive plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.4. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an...

8.8CVSS6.3AI score0.00259EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/12/07 1:15 p.m.•41 views

CVE-2023-47548

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play,...

6.1CVSS0.0039EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/07 1:15 p.m.•14 views

CVE-2023-47548

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play,...

6.1CVSS6.8AI score0.0039EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/07 1:15 p.m.•35 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play,...

5.8CVSS7.1AI score0.0039EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/07 12:15 p.m.•85 views

CVE-2023-47548

CVE-2023-47548 is an Open Redirect vulnerability in the WordPress plugin “Integrate Google Drive” (SoftLab Integrate Google Drive). Affected versions are up to and including 1.3.2; the issue allows unauthenticated exploitation via unvalidated redirect URLs. The vulnerability has been fixed in ver...

6.1CVSS7AI score0.0039EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/07 12:15 p.m.•47 views

CVE-2023-47548 WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play,...

4.7CVSS6.5AI score0.0039EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/12/07 2:05 a.m.•11 views

SUSE CVE-2023-49297

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

7.8CVSS8.2AI score0.0051EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/07 12:00 a.m.•18 views

WordPress Plugin Integrate Google Drive Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

6.1CVSS6.7AI score0.0039EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/07 12:00 a.m.•8 views

CVE-2023-47548: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play,...

6.1CVSS6.4AI score0.0039EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/07 12:00 a.m.•21 views

PT-2023-30498 · WordPress · Softlab Integrate Google Drive

Name of the Vulnerable Software and Affected Versions: SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site versions n/a through 1.3.2 Description: The issue is related to a URL Redirection to Untrusted...

6.1CVSS6.5AI score0.0039EPSS
SaveExploits0References8
NVD
NVD
•added 2023/12/05 9:15 p.m.•25 views

CVE-2023-49297

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

7.8CVSS0.0051EPSS
SaveExploits1References4
PyPA
PyPA
•added 2023/12/05 9:15 p.m.•15 views

PYSEC-2023-291

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

7.8CVSS8.1AI score0.0051EPSS
SaveExploits1References5Affected Software1
Prion
Prion
•added 2023/12/05 9:15 p.m.•23 views

Directory traversal

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

4.4CVSS7.9AI score0.0051EPSS
SaveExploits1References4Affected Software1
osv_pysec
osv_pysec
•added 2023/12/05 9:15 p.m.•15 views

PYSEC-2023-291

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

7.8CVSS7.9AI score0.0051EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/12/05 9:15 p.m.•26 views

CVE-2023-49297

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

7.8CVSS7.4AI score0.0051EPSS
SaveExploits1References4
CVE
CVE
•added 2023/12/05 8:51 p.m.•75 views

CVE-2023-49297

PyDrive2 contains an unsafe YAML deserialization vulnerability that allows arbitrary code execution when a malicious YAML file is present in the same directory or loaded via LoadSettingsFile during GoogleAuth initialization. The issue affects PyDrive2 prior to the fixed release, with a commit c57...

7.8CVSS6.1AI score0.0051EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2023/12/05 8:51 p.m.•26 views

CVE-2023-49297 Unsafe YAML deserialization in PyDrive2

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

3.3CVSS8AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2023/12/05 8:51 p.m.•61 views

CVE-2023-49297 Unsafe YAML deserialization in PyDrive2

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

3.3CVSS8.1AI score0.0051EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2023/12/05 8:51 p.m.•81 views

CVE-2023-49297

Removed by vendor...

7.8CVSS7.6AI score0.0051EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•5 views

CVE-2023-49297: Deserialization of Untrusted Data

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, o...

7.8CVSS7.8AI score0.0051EPSS
SaveExploits1References2
Rows per page
Query Builder