Lucene search
+L

7258 matches found

Vulnrichment
Vulnrichment
added 2025/02/07 10:11 a.m.4 views

CVE-2025-25088 WordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor allows Stored XSS. This issue affects WP Keyword Monitor: from n/a through 1.0.5...

7.1CVSS6.8AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/07 10:11 a.m.24 views

CVE-2025-25088 WordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blackus3r WP Keyword Monitor wp-keyword-monitor allows Cross Site Request Forgery.This issue affects WP Keyword Monitor: from n/a through = 1.0.5...

7.1CVSS0.0015EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/07 12:0 a.m.4 views

WordPress plugin WP Keyword Monitor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.6AI score0.0015EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 4:27 a.m.28 views

CVE-2021-31474

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results...

10CVSS7.3AI score0.94431EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:32 a.m.9 views

CVE-2025-24663

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through = 3.9.25...

7.6CVSS7.3AI score0.00574EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:18 a.m.11 views

CVE-2025-0626

The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to...

7.7CVSS7.7AI score0.01136EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.8 views

Vulnerability of the Monitor component of the IBM Maximo Application Suite, a cloud-based artificial intelligence-driven enterprise asset management platform. It is possible to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker operating remotely t...

6.4CVSS6AI score0.00253EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.8 views

Vulnerability of the Monitor component of the IBM Maximo Application Suite, a cloud-based artificial intelligence-driven enterprise asset management platform. It is possible to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the Monitor component in the IBM Maximo Application Suite for corporate asset management platform exists due to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

6.5CVSS5.9AI score0.00352EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.9 views

Vulnerability of the Monitor component of the IBM Maximo Application Suite, a cloud-based artificial intelligence-driven corporate asset management platform, allowing unauthorized access to protected information

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to insufficient protection of sensitive data in the source code. Exploiting this vulnerability could allow an attacker operating...

5.3CVSS5.5AI score0.003EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.9 views

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, allows a perpetrator to disclose protected information.

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to improper processing of output data from registration logs. Exploiting this vulnerability can allow an attacker to disclose...

5.3CVSS5.4AI score0.00278EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 4:55 p.m.11 views

CVE-2019-17390

An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local privilege escalation in the Health Monitor service because PronestorHealthMonitor.exe access control is mishandled, aka PNB-2359...

8.2CVSS7AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:0 p.m.14 views

CVE-2020-27869

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Authentication is required to exploit this vulnerability. The specific flaw exists within the WriteToFile method. The issue results from the...

9CVSS7.5AI score0.05091EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 2:14 p.m.10 views

CVE-2020-11016

IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send" functionality of the Inspect-tool of the Monitor component. An attacker with access to the IntelMQ Manager could possibly use this issue...

9.1CVSS7.8AI score0.02334EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:0 a.m.18 views

CVE-2024-21545

Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 'Sys.Audit' or 'VM.Monitor' privileges to download arbitrary host files via the API. When handli...

8.2CVSS6.6AI score0.00363EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:30 a.m.14 views

CVE-2024-12248

Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution...

9.8CVSS7.6AI score0.01299EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:39 a.m.15 views

CVE-2024-30501

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...

7.6CVSS5.6AI score0.00609EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:16 a.m.7 views

CVE-2024-47939

Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service D...

7.7CVSS8.2AI score0.00698EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:15 a.m.14 views

CVE-2024-47553

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate user input to the ssmctl-client command. This could allow an authenticated, lowly privileged remote attacker to execute arbitrary code with root privileges on the...

9.9CVSS6.1AI score0.00847EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:14 a.m.10 views

CVE-2024-47562

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly neutralize special elements in user input to the ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to execute privileged commands i...

9.3CVSS5.8AI score0.00265EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:9 a.m.8 views

CVE-2024-29907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Rows per page
Query Builder