Lucene search
+L

12184 matches found

Prion
Prion
•added 2024/01/08 8:15 p.m.•32 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25...

5.8CVSS7.1AI score0.00496EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/08 7:32 p.m.•50 views

CVE-2023-52206 WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25...

7.7CVSS7.8AI score0.00496EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/01/08 7:32 p.m.•21 views

CVE-2023-52206 WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25...

7.7CVSS7.5AI score0.00496EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/08 7:32 p.m.•66 views

CVE-2023-52206

CVE-2023-52206 affects the WordPress plugin "Page Builder: Live Composer" (Live Composer Page Builder) up to version 1.5.25. The issue is described as deserialization of untrusted data leading to PHP object injection via deserialization. Patchstack and CVE records indicate the fix is available in...

7.7CVSS7.5AI score0.00496EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
•added 2024/01/08 4:28 a.m.•14 views

balticlivecam.com Cross Site Scripting vulnerability OBB-3829658

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•7 views

CVE-2023-52206: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25...

7.7CVSS7.2AI score0.00496EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•28 views

WordPress Plugin Page Builder: Live Composer Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

7.7CVSS6.6AI score0.00496EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•8 views

PT-2024-14472

Name of the Vulnerable Software and Affected Versions Live Composer live-composer-page-builder versions 1.5.25 and earlier Description The issue is related to Deserialization of Untrusted Data, which affects the Live Composer live-composer-page-builder. Recommendations For versions 1.5.25 and...

7.7CVSS5.8AI score0.00496EPSS
SaveExploits0References5
OSV
OSV
•added 2024/01/05 5:15 p.m.•6 views

DEBIAN-CVE-2023-34328

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS5.7AI score0.00272EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/05 5:15 p.m.•45 views

CVE-2023-34328

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS5.8AI score0.00272EPSS
SaveExploits0References2
OSV
OSV
•added 2024/01/05 5:15 p.m.•10 views

DEBIAN-CVE-2023-34327

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS5.7AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
•added 2024/01/05 5:15 p.m.•15 views

UBUNTU-CVE-2023-34327

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS6.1AI score0.00272EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/05 5:15 p.m.•14 views

UBUNTU-CVE-2023-34328

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS6AI score0.00272EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/01/03 12:00 a.m.•26 views

WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

Software Page Builder: Live Composer Type Plugin Vulnerable versions = 1.5.25 Fixed in 1.5.29 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52206 Patch priority Medium CVSS severity Medium 7.7 Developer Claim ownership PSID cbdb1d60e22e Credits Le Ngoc Anh Required...

7.7CVSS6.8AI score0.00496EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/01/03 12:00 a.m.•25 views

WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)

Software Page Builder: Live Composer Type Plugin Vulnerable versions = 1.5.23 Fixed in 1.5.24 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-52193 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 70cd66e65bfa Credits Ngô Thiên An ancorn from...

6.5CVSS6.5AI score0.0031EPSS
SaveExploits0References2Affected Software1
Kitploit
Kitploit
•added 2024/01/01 11:30 a.m.•74 views

Pantheon - Insecure Camera Parser

Pantheon is a GUI application that allows users to display information regarding network cameras in various countries as well as an integrated live-feed for non-protected cameras. Functionalities Pantheon allows users to execute an API crawler. There was original functionality without the use of...

7.2AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/31 12:00 a.m.•6 views

CVE-2023-51423: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instan...

9.8CVSS8.2AI score0.00566EPSS
SaveExploits0References2
OSV
OSV
•added 2023/12/29 1:15 p.m.•15 views

CVE-2023-51422

Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings |...

8.8CVSS7.3AI score0.00621EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/12/29 12:59 p.m.•52 views

CVE-2023-51422 WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings |...

9.9CVSS9.7AI score0.00621EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/29 11:15 a.m.•22 views

CVE-2023-51361

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button allows Stored XSS.This issue affects Sticky Chat Widget: Click to chat, SMS,...

4.8CVSS7.3AI score0.00335EPSS
SaveExploits0References1
Rows per page
Query Builder