Lucene search
+L

20553 matches found

Cvelist
Cvelist
added 2024/11/16 9:22 p.m.28 views

CVE-2024-52414 WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu wdes-responsive-mobile-menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through = 5.3.18...

9.8CVSS0.00524EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/16 9:22 p.m.13 views

CVE-2024-52414 WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18...

9.8CVSS6.9AI score0.00524EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/14 7:15 a.m.24 views

CVE-2024-11206

Unauthorized access vulnerability in the mobile application com.transsion.phoenix can lead to the leakage of user information...

7.5CVSS0.00382EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/14 6:27 a.m.62 views

CVE-2024-11206

CVE-2024-11206 describes an unauthorized access vulnerability in the mobile app com.transsion.phoenix (used on TECNO devices) that can lead to leakage of user information. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) yields a base score of 7.5 (HIGH). The reports do not specify the e...

7.5CVSS6.9AI score0.00382EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/14 6:27 a.m.21 views

CVE-2024-11206

Unauthorized access vulnerability in the mobile application com.transsion.phoenix can lead to the leakage of user information...

0.00382EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/14 6:27 a.m.9 views

CVE-2024-11206

Unauthorized access vulnerability in the mobile application com.transsion.phoenix can lead to the leakage of user information...

6.8AI score0.00382EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2024/11/14 1:01 a.m.6 views

SUSE CVE-2024-11115

Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures. Chromium security severity: Medium...

8.8CVSS6.9AI score0.00422EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/11/14 12:00 a.m.8 views

PT-2024-16823 · Transsion · Com.Transsion.Phoenix

Name of the Vulnerable Software and Affected Versions: com.transsion.phoenix affected versions not specified Description: There is an unauthorized access vulnerability in the mobile application com.transsion.phoenix, which can lead to the leakage of user information. The issue affects TECNO devic...

7.5CVSS7AI score0.00382EPSS
SaveExploits0References10
Schneier on Security
Schneier on Security
added 2024/11/13 12:06 p.m.9 views

Mapping License Plate Scanners in the US

DeFlock is a crowd-sourced project to map license plate scanners. It only records the fixed scanners, of course. The mobile scanners on cars are not mapped...

7.2AI score
SaveExploits0
Patchstack
Patchstack
added 2024/11/13 12:00 a.m.16 views

WordPress WDES Responsive Mobile Menu Plugin <= 5.3.18 is vulnerable to PHP Object Injection

Software WDES Responsive Mobile Menu Type Plugin Vulnerable versions = 5.3.18 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52414 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 3807cf50f771 Credits Mika Required privilege...

9.8CVSS7.2AI score0.00524EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.9 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...

7.5CVSS6.1AI score0.01088EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.9 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...

7.5CVSS6.3AI score0.39654EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.10 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...

7.5CVSS6.3AI score0.0116EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.10 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...

7.5CVSS6.3AI score0.0116EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/11/08 5:22 p.m.110 views

Exploit for Missing Authentication for Critical Function in Stacksmarket Stacks_Mobile_App_Builder

CVE-2024-50477 Stacks Mobile App Builder = 5.2.3 - Authent...

9.8CVSS9.6AI score0.08184EPSS
SaveExploits3
Patchstack
Patchstack
added 2024/11/08 1:08 p.m.7 views

WordPress Mobile Kiosk plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Mobile Kiosk versions = 1.3.0...

6.5CVSS6.1AI score0.0039EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.9 views

WordPress Mobile Kiosk Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Mobile Kiosk Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51829 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7924bf5d9424 Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.5AI score0.0039EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/11/07 6:15 p.m.28 views

CVE-2020-11921

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...

8.8CVSS0.00245EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/07 12:00 a.m.30 views

CVE-2020-11921

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...

0.00245EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/07 12:00 a.m.62 views

CVE-2020-11921

CVE-2020-11921 affects Lush 2 (through 2020-02-25). The issue is the lack of Bluetooth traffic encryption, enabling an attacker to hijack an ongoing Bluetooth connection with a mobile phone and gain full control over the device. The CVSSv3.1 base score is 8.8 (HIGH). Remediation: update Lush 2 to...

8.8CVSS7.3AI score0.00245EPSS
SaveExploits0References2
Rows per page
Query Builder