Lucene search
+L

11395 matches found

CVE
CVE
•added 2024/09/12 8:30 a.m.•77 views

CVE-2024-8622

The CVE-2024-8622 entry concerns the amCharts: Charts and Maps plugin for WordPress. Affected versions are

6.1CVSS6AI score0.00384EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2024/09/10 10:15 a.m.•10 views

CVE-2023-2919

The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. This is due to missing or incorrect nonce validation on the 'addonenabledisable' function. This makes it possible for unauthenticated attackers to enable or disable addons via a...

4.3CVSS5.6AI score0.00219EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/09/10 10:15 a.m.•23 views

CVE-2023-2919

The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. This is due to missing or incorrect nonce validation on the 'addonenabledisable' function. This makes it possible for unauthenticated attackers to enable or disable addons via a...

4.3CVSS5.6AI score0.00219EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/09/10 9:30 a.m.•13 views

CVE-2023-2919 Tutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable'

The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. This is due to missing or incorrect nonce validation on the 'addonenabledisable' function. This makes it possible for unauthenticated attackers to enable or disable addons via a...

4.3CVSS5.6AI score0.00219EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/10 12:00 a.m.•8 views

CVE-2023-2919: Cross-Site Request Forgery (CSRF)

The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. This is due to missing or incorrect nonce validation on the 'addonenabledisable' function. This makes it possible for unauthenticated attackers to enable or disable addons via a...

4.3CVSS5.6AI score0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/10 12:00 a.m.•20 views

PT-2024-12208 · WordPress · Tutor Lms

Name of the Vulnerable Software and Affected Versions: Tutor LMS plugin for WordPress versions up to, and including, 2.7.4 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the addon enable disable function. This allows unauthenticated...

4.3CVSS5.7AI score0.00219EPSS
SaveExploits0References8
NVD
NVD
•added 2024/08/30 8:15 a.m.•34 views

CVE-2024-8319

The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.20. This is due to missing or incorrect nonce validation on the tforderstatusemailresendfunction, tfvisitordetailseditfunction, tfcheckinoutdetailseditfunction,...

4.3CVSS0.00185EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/08/30 8:15 a.m.•23 views

CVE-2024-8319

The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.20. This is due to missing or incorrect nonce validation on the tforderstatusemailresendfunction, tfvisitordetailseditfunction, tfcheckinoutdetailseditfunction,...

4.3CVSS5.6AI score0.00185EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/08/30 7:33 a.m.•21 views

CVE-2024-8319 Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions

The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.20. This is due to missing or incorrect nonce validation on the tforderstatusemailresendfunction, tfvisitordetailseditfunction, tfcheckinoutdetailseditfunction,...

4.3CVSS5.6AI score0.00185EPSS
SaveExploits0References2
CVE
CVE
•added 2024/08/30 7:33 a.m.•80 views

CVE-2024-8319

CVE-2024-8319 affects the Tourfic WordPress plugin (

4.3CVSS5.6AI score0.00185EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/08/30 7:33 a.m.•51 views

CVE-2024-8319 Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions

The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.20. This is due to missing or incorrect nonce validation on the tforderstatusemailresendfunction, tfvisitordetailseditfunction, tfcheckinoutdetailseditfunction,...

4.3CVSS0.00185EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•6 views

CVE-2024-8319: Cross-Site Request Forgery (CSRF)

The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.20. This is due to missing or incorrect nonce validation on the tforderstatusemailresendfunction, tfvisitordetailseditfunction, tfcheckinoutdetailseditfunction,...

4.3CVSS5.6AI score0.00185EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/30 12:00 a.m.•24 views

PT-2024-38937 · WordPress · Tourfic

Name of the Vulnerable Software and Affected Versions: The Tourfic plugin for WordPress versions up to, and including, 2.11.20 Description: The issue is due to missing or incorrect nonce validation on several functions, including tf order status email resend function, tf visitor details edit...

4.3CVSS5.5AI score0.00185EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2024/08/29 3:22 a.m.•9 views

SUSE CVE-2024-1544

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....

4.9CVSS5.5AI score0.00349EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/08/27 7:15 p.m.•12 views

CVE-2024-1544

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....

4.9CVSS5.5AI score0.00349EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2024/08/27 7:15 p.m.•11 views

DEBIAN-CVE-2024-1544

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....

4.9CVSS5.5AI score0.00349EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/27 7:15 p.m.•24 views

CVE-2024-1544

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....

4.9CVSS0.00349EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2024/08/27 7:15 p.m.•20 views

UBUNTU-CVE-2024-1544

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....

4.9CVSS5.5AI score0.00349EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/08/27 7:15 p.m.•25 views

CVE-2024-1544

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....

4.9CVSS5.5AI score0.00349EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/08/27 6:44 p.m.•39 views

CVE-2024-1544 ECDSA nonce bias caused by truncation

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....

4.1CVSS5.5AI score0.00349EPSS
SaveExploits0References2
Rows per page
Query Builder