Lucene search
+L

272 matches found

Positive Technologies
Positive Technologies
•added 2022/11/20 12:00 a.m.•3 views

PT-2022-25543

Name of the Vulnerable Software and Affected Versions Opal Login History Plugin affected versions not specified Description A problematic vulnerability has been found in the Opal Login History Plugin, affecting the HTTP Header Handler component. The issue arises from the manipulation of the...

SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/11/20 12:00 a.m.•15 views

PT-2022-25580 · Top Infosoft · Top Infosoft Visitor Details Plugin

Name of the Vulnerable Software and Affected Versions: Top Infosoft Visitor Details Plugin affected versions not specified Description: A vulnerability was found in the HTTP Header Handler component of the Top Infosoft Visitor Details Plugin, which can be exploited remotely. The issue is related ...

6.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/20 12:00 a.m.•22 views

PT-2022-25520 · Codeboxr · Codeboxr Cbx User Online & Last Login Plugin

Name of the Vulnerable Software and Affected Versions: codeboxr CBX User Online & Last Login Plugin affected versions not specified Description: A vulnerability was found in the codeboxr CBX User Online & Last Login Plugin, affecting the HTTP Header Handler component. The manipulation of the...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/20 12:00 a.m.•3 views

PT-2022-25585

Name of the Vulnerable Software and Affected Versions WP White Security WP Activity Log Plugin affected versions not specified Description A vulnerability was found in the WP White Security WP Activity Log Plugin, affecting an unknown part of the component HTTP Header Handler. The manipulation of...

SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/20 12:00 a.m.•16 views

PT-2022-25502 · Unknown · Show Ip Address Plugin

Name of the Vulnerable Software and Affected Versions: Show IP Address Plugin affected versions not specified Description: A vulnerability was found in the Show IP Address Plugin, affecting the HTTP Header Handler component. The manipulation of the X-Forwarded-For argument leads to improper outpu...

6.4AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/20 12:00 a.m.•11 views

PT-2022-25549 · WordPress · Getseofix Show Visitor Ip Address Widget/Shortcode Plugin

Name of the Vulnerable Software and Affected Versions: getseofix Show Visitor IP Address Widget and Shortcode Plugin affected versions not specified Description: A problematic vulnerability was found in the HTTP Header Handler component. The manipulation of the X-Forwarded-For argument leads to...

6.3AI score
SaveExploits0References2
Prion
Prion
•added 2022/11/16 8:15 a.m.•26 views

Design/Logic Flaw

A vulnerability was found in Simple History Plugin. It has been rated as critical. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. T...

7.5CVSS9.5AI score0.01032EPSS
SaveExploits1References3
CVE
CVE
•added 2022/11/16 12:00 a.m.•65 views

CVE-2022-4011

CVE-2022-4011 affects the WordPress Simple History Plugin, specifically the Header Handler. The issue arises from manipulation of the X-Forwarded-For argument, causing improper output neutralization in logs. The vulnerability is exploitable remotely and has been disclosed publicly. Several connec...

9.8CVSS8.2AI score0.01032EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/16 12:00 a.m.•13 views

PT-2022-25212 · WordPress · Simple History Plugin

Name of the Vulnerable Software and Affected Versions: Simple History Plugin affected versions not specified Description: A critical issue affects the Header Handler component of the Simple History Plugin, where the manipulation of the X-Forwarded-For argument leads to improper output...

9.8CVSS9.4AI score0.01032EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/16 12:00 a.m.•6 views

CVE-2022-4011: Improper Neutralization

A vulnerability was found in Simple History Plugin. It has been rated as critical. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack may be initiated remotely. T...

9.8CVSS5.4AI score0.01032EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/11/16 12:00 a.m.•71 views

WordPress Zoho Activity Log Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Zoho Activity Log is vulnerable to an input validation error that originates from unknown...

5.3CVSS0.00738EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/15 10:15 p.m.•35 views

CVE-2022-4006

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increaseattempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of...

7.5CVSS0.00841EPSS
SaveExploits1References3
Prion
Prion
•added 2022/11/15 10:15 p.m.•27 views

Design/Logic Flaw

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increaseattempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of...

5CVSS7.7AI score0.00841EPSS
SaveExploits1References3
OSV
OSV
•added 2022/11/15 12:00 a.m.•20 views

CVE-2022-4006 WBCE CMS Header class.login.php increase_attempts excessive authentication

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increaseattempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of...

3.7CVSS6AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2022/11/15 12:00 a.m.•44 views

CVE-2022-4006 WBCE CMS Header class.login.php increase_attempts excessive authentication

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increaseattempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of...

3.7CVSS7.9AI score0.00841EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/15 12:00 a.m.•2 views

CVE-2022-4006: Uncontrolled Resource Consumption

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increaseattempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of...

7.5CVSS5.2AI score0.00841EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/11/15 12:00 a.m.•12 views

CVE-2022-4006 WBCE CMS Header class.login.php increase_attempts excessive authentication

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increaseattempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of...

3.7CVSS4.9AI score0.00841EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/11/15 12:00 a.m.•24 views

WBCE CMS 安全漏洞

WBCE CMS is an open source content management system CMS based on PHP and MySQL. WBCE CMS suffers from an Access Control Error vulnerability that stems from the increaseattempts function in the wbce/framework/class.login.php file in its Header Handler component not appropriately restricting too...

7.5CVSS7.1AI score0.00841EPSS
SaveExploits1References5
NVD
NVD
•added 2022/11/11 7:15 a.m.•43 views

CVE-2022-3941

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

5.3CVSS0.00738EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/11/11 7:15 a.m.•11 views

CVE-2022-3941

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

5.3CVSS5.6AI score0.00738EPSS
SaveExploits1References4
Rows per page
Query Builder