Lucene search
+L

1273 matches found

Cvelist
Cvelist
added 2024/10/16 9:03 p.m.39 views

CVE-2024-48918 Lack of Input Validation in RDS Light - Potential for Injection Attacks and Memory Tampering

RDS Light is a simplified version of the Reflective Dialogue System RDS, a self-reflecting AI framework. Versions prior to 1.1.0 contain a vulnerability that involves a lack of input validation within the RDS AI framework, specifically within the user input handling code in the main module main.p...

9.3CVSS0.00408EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/16 9:03 p.m.16 views

CVE-2024-48918 Lack of Input Validation in RDS Light - Potential for Injection Attacks and Memory Tampering

RDS Light is a simplified version of the Reflective Dialogue System RDS, a self-reflecting AI framework. Versions prior to 1.1.0 contain a vulnerability that involves a lack of input validation within the RDS AI framework, specifically within the user input handling code in the main module main.p...

9.3CVSS7.5AI score0.00408EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/16 9:03 p.m.22 views

CVE-2024-48918 Lack of Input Validation in RDS Light - Potential for Injection Attacks and Memory Tampering

RDS Light is a simplified version of the Reflective Dialogue System RDS, a self-reflecting AI framework. Versions prior to 1.1.0 contain a vulnerability that involves a lack of input validation within the RDS AI framework, specifically within the user input handling code in the main module main.p...

9.3CVSS7.7AI score
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.9 views

RDS Light 安全漏洞

RDS Light is an artificial intelligence framework open-sourced by RDS ai. A security vulnerability exists in RDS Light versions prior to 1.1.0 that stems from a lack of input validation. An attacker exploiting this vulnerability could inject malicious commands, corrupt stored data, or affect API...

9.3CVSS6.4AI score0.00408EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/10 6:07 a.m.11 views

Malicious code in numeral-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0745207c17df1a5cbcd760a28f72def582f071d4860ce74387cd251b4556c1a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/10/10 6:07 a.m.11 views

MAL-2024-9243 Malicious code in numeral-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0745207c17df1a5cbcd760a28f72def582f071d4860ce74387cd251b4556c1a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
zdt
zdt
added 2024/08/14 12:00 a.m.177 views

WordPress Light Poll 1.0.0 Cross Site Request Forgery Vulnerability

Exploit Title: Light Poll history.pushState'', '', '/'; document.forms0.submit; Reference: https://wpscan.com/vulnerability/d598eabd-a87a-4e3e-be46-a5c5cc3f130e/ Exploit Title: Light Poll and are valid: https://example.com/wp-admin/admin.php?page=pollsettings&task=r...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/13 12:00 a.m.272 views

WordPress Light Poll 1.0.0 Cross Site Request Forgery

Exploit Title: Light Poll history.pushState'', '', '/'; document.forms0.submit; Reference: https://wpscan.com/vulnerability/d598eabd-a87a-4e3e-be46-a5c5cc3f130e/ Exploit Title: Light Poll and are...

7.4AI score
SaveExploits0
OSV
OSV
added 2024/08/06 4:15 p.m.10 views

CVE-2024-6720

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS5.8AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/06 4:15 p.m.31 views

CVE-2024-6720

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS0.00225EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/06 3:28 p.m.35 views

CVE-2024-6720

CVE-2024-6720 affects Light Poll WordPress plugin (

8.8CVSS7AI score0.00225EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/06 3:28 p.m.15 views

CVE-2024-6720 Light Poll <= 1.0.0 - Poll Answers Deletion via CSRF

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

6.8AI score0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/06 3:28 p.m.52 views

CVE-2024-6720 Light Poll <= 1.0.0 - Poll Answers Deletion via CSRF

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

0.00225EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/06 12:00 a.m.11 views

PT-2024-37820 · WordPress · The Light Poll

Name of the Vulnerable Software and Affected Versions: The Light Poll WordPress plugin version 1.0.0 Description: The issue concerns the lack of CSRF checks in certain areas, potentially allowing attackers to trick logged-in users into performing unintended actions through CSRF attacks...

8.8CVSS6.7AI score0.00225EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/08/06 12:00 a.m.8 views

WordPress plugin Light Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.6AI score0.00225EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/01 6:15 a.m.8 views

CVE-2024-6496

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks when deleting polls, which could allow attackers to make logged in users perform such action via a CSRF attack...

6.5CVSS5.8AI score0.0027EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/08/01 6:00 a.m.14 views

CVE-2024-6496 Light Poll <= 1.0.0 - Polls Deletion via CSRF

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks when deleting polls, which could allow attackers to make logged in users perform such action via a CSRF attack...

6.8AI score0.0027EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/08/01 6:00 a.m.43 views

CVE-2024-6496 Light Poll <= 1.0.0 - Polls Deletion via CSRF

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks when deleting polls, which could allow attackers to make logged in users perform such action via a CSRF attack...

0.0027EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/08/01 12:00 a.m.11 views

WordPress plugin Light Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.7AI score0.0027EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2024/07/16 2:20 a.m.11 views

WordPress Light Poll plugin <= 1.0.0 - Poll Answers Deletion via CSRF vulnerability

Poll Answers Deletion via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin Light Poll versions = 1.0.0...

8.8CVSS7AI score0.00225EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder