Lucene search
+L

11367 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:26 p.m.8 views

Malicious code in Be.Vlaanderen.Basіsregistеrs.AddressRegistrу.Api.CrabImpоrt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:25 p.m.5 views

Malicious code in Be.Vlaandеren.Basisregisters.ParcelRegistrу.Api.CrabImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:25 p.m.4 views

Malicious code in Be.Vlaandеren.Basisregisters.BuildingRegistrу.Api.CrabImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:25 p.m.5 views

Malicious code in Be.Vlaandеren.Basіsregisters.PаrcelRegistrу.Api.CrabImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 1:25 p.m.8 views

MAL-2024-4210 Malicious code in Be.Vlaanԁеren.Basіsregisters.GrAr.Import.Xunіt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.5 views

Malicious code in Be.Vlaaոderеn.Basіsregisters.StreetNameRеgistry.Api.CrabImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.5 views

Malicious code in Be.Vlaаnԁeren.Basisregisters.MunicipalityRegistry.Api.CrabImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.7 views

Malicious code in Be.Vlaаnԁeren.Basisregisters.MunicipalityRegistrу.Api.CrabImpоrt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:23 p.m.5 views

Malicious code in Bе.Vlaanderen.Bаsisregisters.PostalRеgistry.Api.CrаbImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:23 p.m.5 views

Malicious code in Bе.Vlaandеren.Basisregisters.BuildingRegistrу.Aрi.CrabImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:25 p.m.3 views

Malicious code in addin-fuel-transaction-import (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
NCSC
NCSC
added 2024/06/25 10:17 a.m.13 views

Vulnerability fixed in XWiki

The developers of XWiki have fixed a vulnerability in XWiki. The vulnerability is in the way documents are imported into articles. The document's permissions remain on the person importing the document, allowing anyone with permissions to the original document to perform actions with permissions...

9.9CVSS7.4AI score0.00342EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/25 12:00 a.m.6 views

WordPress Plugin Zita Elementor Site Library Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.00343EPSS
SaveExploits0References3
OSV
OSV
added 2024/06/22 12:15 a.m.16 views

CVE-2024-6120

The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7. This makes it possible for authenticated attackers, with Subscriber-level access...

6.5CVSS5.8AI score0.00503EPSS
SaveExploits0References9
NVD
NVD
added 2024/06/22 12:15 a.m.34 views

CVE-2024-6120

The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7. This makes it possible for authenticated attackers, with Subscriber-level access...

6.5CVSS0.00503EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/06/22 12:00 a.m.7 views

WordPress plugin Sparkle Demo Importer security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

6.5CVSS6.6AI score0.00503EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2024/06/21 11:33 p.m.41 views

CVE-2024-6120 Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import

The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7. This makes it possible for authenticated attackers, with Subscriber-level access...

6.5CVSS0.00503EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/06/21 11:33 p.m.13 views

CVE-2024-6120 Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import

The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7. This makes it possible for authenticated attackers, with Subscriber-level access...

6.5CVSS6.5AI score0.00503EPSS
SaveExploits0References9
CVE
CVE
added 2024/06/21 11:33 p.m.68 views

CVE-2024-6120

CVE-2024-6120 affects the WordPress plugin Sparkle Demo Importer. Public details in connected docs confirm: all versions up to 1.4.7 are vulnerable due to a missing capability check in multiple functions, enabling authenticated attackers with Subscriber-level access (and above) to perform a destr...

6.5CVSS6.5AI score0.00503EPSS
SaveExploits0References9Affected Software1
Patchstack
Patchstack
added 2024/06/21 1:24 p.m.9 views

WordPress Sparkle Demo Importer plugin <= 1.4.7 - Authenticated Post/Pages/Attachements Deletion and Demo Data Import vulnerability

Authenticated Post/Pages/Attachements Deletion and Demo Data Import vulnerability discovered by Lucio Sá in WordPress Plugin Sparkle Demo Importer versions = 1.4.7...

6.5CVSS7AI score0.00503EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder