Lucene search
+L

1231 matches found

RustSec
RustSec
added 2024/12/09 12:0 p.m.7 views

`idna` accepts Punycode labels that do not produce any non-ASCII when decoded

idna 0.5.0 and earlier accepts Punycode labels that do not produce any non-ASCII output, which means that either ASCII labels or the empty root label can be masked such that they appear unequal without IDNA processing or when processed with a different implementation and equal when processed with...

8.8CVSS7.2AI score0.00201EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2024/12/06 2:15 p.m.22 views

CVE-2024-53817

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n/a through = 1.5.8...

7.6CVSS0.00431EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/06 1:5 p.m.10 views

CVE-2024-53817 WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Acowebs Product Labels For Woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n/a through 1.5.8...

7.6CVSS7.7AI score0.00431EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/06 1:5 p.m.26 views

CVE-2024-53817 WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in acowebs Product Labels For Woocommerce aco-product-labels-for-woocommerce allows Blind SQL Injection.This issue affects Product Labels For Woocommerce: from n/a through = 1.5.8...

7.6CVSS0.00431EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/06 1:5 p.m.66 views

CVE-2024-53817

CVE-2024-53817 affects the WordPress plugin Product Labels For Woocommerce (Acowebs) and is caused by improper neutralization of special elements in SQL commands, enabling a blind SQL injection. Affected versions are 1.5.8 and earlier. The vulnerability is described as allowing Blind SQL Injectio...

7.6CVSS7.3AI score0.00431EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.6 views

WordPress plugin Product Labels For Woocommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress...

7.6CVSS8.7AI score0.00431EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/02 11:35 a.m.5 views

WordPress Acowebs Product Labels For Woocommerce plugin <= 1.5.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin Product Labels For Woocommerce versions = 1.5.8...

7.6CVSS8.1AI score0.00431EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2024/11/12 9:11 a.m.9 views

kernel: powerpc/64s: fix program check interrupt emergency stack path

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: fix program check interrupt emergency stack path Emergency stack path was jumping into a 3: label inside the GENCOMMONBODY macro for the normal path after it had finished, rather than jumping over it. By a small...

5.5CVSS6.8AI score0.00222EPSS
SaveExploits0References5
OSV
OSV
added 2024/11/01 3:15 p.m.6 views

CVE-2024-43310

Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through 3.4.9...

8.8CVSS5.8AI score0.00528EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.58 views

CVE-2024-43310

CVE-2024-43310 corresponds to a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin “Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce” (also seen as UkrSolution Print Barcode Labels for your WooCommerce). Affected versions...

8.8CVSS7.1AI score0.00528EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.40 views

CVE-2024-43310 WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through 3.4.9...

6.5CVSS0.00528EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.12 views

CVE-2024-43310 WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through 3.4.9...

6.5CVSS7.2AI score0.00528EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.7 views

WordPress plugin Print Barcode Labels for your WooCommerce products/orders 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin Print Barcode...

8.8CVSS6.5AI score0.00528EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/07 12:0 a.m.7 views

Discourse 安全漏洞

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes features such as communities, email and chat rooms. A security vulnerability exists in Discourse that stems from allowing users to view topics with hidden labels with knowledge of the...

5.3CVSS6.4AI score0.00327EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/05 3:15 p.m.18 views

CVE-2024-47622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through = 2.01...

6.5CVSS0.00247EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/05 2:36 p.m.47 views

CVE-2024-47622

CVE-2024-47622 affects WordPress plugin Advanced Woo Labels (versions n/a through 2.01). The issue is a Stored XSS caused by improper input handling during web page generation. Exploitation could occur when user-supplied input is not properly neutralized before rendering. A fix is available: upda...

6.5CVSS5.9AI score0.00247EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/05 2:36 p.m.11 views

CVE-2024-47622 WordPress Advanced Woo Labels plugin <= 2.01 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through 2.01...

6.5CVSS6.8AI score0.00247EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/05 2:36 p.m.22 views

CVE-2024-47622 WordPress Advanced Woo Labels plugin <= 2.01 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through = 2.01...

6.5CVSS0.00247EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/05 3:15 a.m.7 views

CVE-2024-9528

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form label fields in all versions up to, and including, 5.1.19 due to insufficient input sanitization and output escaping. This makes it...

4.8CVSS5.9AI score0.00378EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/05 12:0 a.m.6 views

PT-2024-32679 · Unknown · Illid Advanced Woo Labels

Name of the Vulnerable Software and Affected Versions: ILLID Advanced Woo Labels versions n/a through 2.01 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which occurs due to...

6.5CVSS6.6AI score0.00247EPSS
SaveExploits0References5
Rows per page
Query Builder