Lucene search
+L

8714 matches found

Vulnrichment
Vulnrichment
•added 2024/12/02 1:48 p.m.•7 views

CVE-2024-53715 WordPress Simple Travel Map plugin <= 0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Simple Travel Map simple-travel-map allows Stored XSS.This issue affects Simple Travel Map: from n/a through = 0.1...

7.1CVSS7.2AI score0.00173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/02 1:48 p.m.•13 views

CVE-2024-53769 WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in lriaudel Custom Post Type to Map Store cpt-to-map-store allows Stored XSS.This issue affects Custom Post Type to Map Store: from n/a through = 1.1.0...

7.1CVSS7.2AI score0.00158EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•58 views

CVE-2024-53769

CVE-2024-53769 is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin “Custom Post Type to Map Store” up to version 1.1.0. The issue is triggered by cross-site requests that lead to stored XSS and is documented with CVSS v3.1 base score 7.1 (HIGH). The available sources describe the...

7.1CVSS7.2AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/02 1:48 p.m.•31 views

CVE-2024-53769 WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in lriaudel Custom Post Type to Map Store cpt-to-map-store allows Stored XSS.This issue affects Custom Post Type to Map Store: from n/a through = 1.1.0...

7.1CVSS0.00158EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•2 views

CVE-2024-53715: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Simple Travel Map simple-travel-map allows Stored XSS.This issue affects Simple Travel Map: from n/a through = 0.1...

7.1CVSS5.8AI score0.00173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•18 views

PT-2024-35822 · Unknown · Simple Travel Map

Name of the Vulnerable Software and Affected Versions: Simple Travel Map versions n/a through 0.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS9.4AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•12 views

WordPress plugin Simple Travel Map 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.2AI score0.00173EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•4 views

CVE-2024-53769: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in lriaudel Custom Post Type to Map Store cpt-to-map-store allows Stored XSS.This issue affects Custom Post Type to Map Store: from n/a through = 1.1.0...

7.1CVSS5.8AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•15 views

WordPress plugin Custom Post Type to Map Store 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.5AI score0.00158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•5 views

PT-2024-35880

Name of the Vulnerable Software and Affected Versions Ludovic RIAUDEL Custom Post Type to Map Store versions n/a through 1.1.0 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended action...

7.1CVSS0.00158EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2024/11/28 1:48 p.m.•12 views

WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Custom Post Type to Map Store versions = 1.1.0...

7.1CVSS6.2AI score0.00158EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
•added 2024/11/27 4:04 a.m.•10 views

SUSE CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.7CVSS6.6AI score0.00506EPSS
SaveExploits0References4
OSV
OSV
•added 2024/11/26 3:15 p.m.•29 views

CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS6.6AI score
SaveExploits0References1
OSV
OSV
•added 2024/11/26 3:15 p.m.•9 views

DEBIAN-CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS4.5AI score0.00506EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/26 3:15 p.m.•25 views

UBUNTU-CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS5.8AI score0.00506EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/11/26 2:11 p.m.•20 views

CVE-2024-22117 Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS6.8AI score0.00506EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/26 2:11 p.m.•38 views

CVE-2024-22117 Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS0.00506EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/11/26 2:11 p.m.•54 views

CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS4.5AI score0.00506EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•18 views

The vulnerability of the sock_map_{close,destroy,unhash}() functions in the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the functions sockmapclose,destroy,unhash in the net/core/sockmap.c module of the Linux operating system is related to stack overflow due to infinite recursion. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and accessibility of th...

9.1CVSS6.8AI score0.01219EPSS
SaveExploits0References16Affected Software5
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•19 views

The vulnerability of the mmap_mutex function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the mmapmutex function in Linux operating systems is related to the recovery of unreliable data in memory. Exploiting this vulnerability can allow a remote attacker to compromise confidentiality, integrity, and accessibility of data...

5.5CVSS6.7AI score0.00302EPSS
SaveExploits0References35Affected Software7
Rows per page
Query Builder