Lucene search
+L

27 matches found

Cvelist
Cvelist
added 2025/04/10 4:22 a.m.67 views

CVE-2025-3102 SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

8.1CVSS0.7568EPSS
SaveExploits8References3
OSV
OSV
added 2024/11/26 6:15 a.m.7 views

CVE-2024-10781

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an missing empty value check on the 'apikey' value in the 'perform' function in all versions up to, and including, 6.44. This makes it possible for...

7.5CVSS6.5AI score0.03824EPSS
SaveExploits1References4
CVE
CVE
added 2024/11/26 5:33 a.m.138 views

CVE-2024-10781

The CVE-2024-10781 entry affects the WordPress plugin CleanTalk Spam protection, Anti-Spam, FireWall (versions

8.1CVSS8.3AI score0.03824EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2023/04/26 12:0 a.m.7 views

ToolJet 安全漏洞

ToolJet is an extensible low-code framework for building business applications from ToolJet. A security vulnerability exists in Tooljet version v1.6.0 that stems from not properly handling missing values in the API. An attacker can exploit the vulnerability to arbitrarily reset a password via a...

7.5CVSS7.9AI score0.01036EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.5 views

SUSE CVE-2012-0021

The logcookie function in modlogconfig.c in the modlogconfig module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %C format string, which allows remote attackers to cause a denial of service daemon crash via a cookie that lacks both a nam...

2.6CVSS8.7AI score0.30809EPSS
SaveExploits0References8
OSV
OSV
added 2021/04/13 4:15 p.m.7 views

CVE-2021-21729

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N V2.5.5BTMT1...

6.5CVSS6.6AI score0.00379EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2018/12/18 12:0 a.m.5 views

VulnCheck KEV: CVE-2018-11776

Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespace option is true and the value isn't set for a result defined in underlying configurations and in same time, its upper package configuration have no or...

9.3CVSS7.9AI score0.99991EPSS
SaveExploits42References1
Rows per page
Query Builder