Lucene search
+L

456 matches found

Vulnrichment
Vulnrichment
added 2024/04/26 10:43 a.m.14 views

CVE-2024-33677 WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70...

4.3CVSS5.1AI score0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/26 10:43 a.m.23 views

CVE-2024-33677 WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70...

4.3CVSS5AI score0.00201EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2024/04/18 12:0 a.m.16 views

A Bootiful Podcast: Spring founders Rod Johnson and Juergen Hoeller on the 20th Anniversary of Spring Framework 1.0

Hi, Spring fans! In this episode, more than 20 incredible years in the making, Spring founders Rod Johnson @springrod and Juergen Hoeller @springjuergen discuss Spring since its 1.0 release in 2004...

7.2AI score
SaveExploits0
ICS
ICS
added 2024/02/08 7:0 a.m.55 views

Qolsys IQ Panel 4, IQ4 HUB

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION : Low attack complexity Vendor : Qolsys, Inc. Equipment : IQ Panel 4, IQ4 Hub Vulnerability : Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow the panel...

9.8CVSS8.6AI score0.00585EPSS
SaveExploits0References8
NVD
NVD
added 2024/01/31 2:15 p.m.34 views

CVE-2024-1112

Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument...

9.8CVSS8.1AI score0.01592EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/31 2:15 p.m.27 views

Heap overflow

Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument...

7.5CVSS8.4AI score0.01592EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 1:17 p.m.9 views

CVE-2024-1112 Buffer Overflow Vulnerability in Resource Hacker

Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument...

7.3CVSS8.3AI score0.01592EPSS
SaveExploits1References1
CVE
CVE
added 2024/01/31 1:17 p.m.55 views

CVE-2024-1112

CVE-2024-1112 is a heap-based buffer overflow in Resource Hacker (Angus Johnson) affecting version 3.6.0.92, allowing arbitrary code execution via a long filename argument. The vulnerability is documented across multiple connected sources, including a PoC exploit on GitHub that demonstrates using...

9.8CVSS9.6AI score0.01592EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/01/31 1:17 p.m.35 views

CVE-2024-1112 Buffer Overflow Vulnerability in Resource Hacker

Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument...

7.3CVSS9.9AI score0.01592EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2024/01/30 4:13 p.m.12 views

johnsonrollforming.com Cross Site Scripting vulnerability OBB-3846346

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2024/01/24 12:15 p.m.6 views

CVE-2024-22134

Server-Side Request Forgery SSRF vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70...

6.5CVSS5.8AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/24 12:15 p.m.25 views

CVE-2024-22134

Server-Side Request Forgery SSRF vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70...

6.5CVSS5.5AI score0.00277EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/24 12:15 p.m.23 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70...

4CVSS7.2AI score0.00277EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/24 11:39 a.m.13 views

CVE-2024-22134 WordPress Contact Form 7 Extension For Mailchimp Plugin <= 0.5.70 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70...

4.9CVSS6.9AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/24 11:39 a.m.44 views

CVE-2024-22134

The CVE CVE-2024-22134 concerns a Server-Side Request Forgery (SSRF) in the WordPress plugin “Contact Form 7 Extension For Mailchimp” (Renzo Johnson). Affected versions are

6.5CVSS7.1AI score0.00277EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2024/01/21 11:15 a.m.9 views

johnsonfuneralhome.net Cross Site Scripting vulnerability OBB-3839457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
ICS
ICS
added 2023/12/14 7:0 a.m.34 views

Johnson Controls Kantech Gen1 ioSmart

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable from adjacent network Vendor : Sensormatic Electronics, LLC, an affiliate of Johnson Controls Inc. Equipment : Kantech Gen1 ioSmart card reader Vulnerability : Missing Release of Memory after Effective Lifetime 2. RISK EVALUATION...

7.5CVSS6.3AI score0.003EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2023/12/14 12:0 a.m.33 views

Johnson Controls Metasys and Facility Explorer Uncontrolled Resource Consumption (CVE-2023-4486)

Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service. This...

7.5CVSS7.1AI score0.00827EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/07 8:15 p.m.16 views

CVE-2023-4486

Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service...

7.5CVSS0.00827EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/07 8:15 p.m.17 views

Design/Logic Flaw

Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service...

5CVSS7.3AI score0.00827EPSS
SaveExploits0References2Affected Software10
Rows per page
Query Builder