Lucene search
+L

38306 matches found

CVE
CVE
•added 2024/10/25 4:33 a.m.•120 views

CVE-2024-9686

CVE-2024-9686 affects the WordPress plugin “Order Notification for Telegram” (

5.3CVSS5.5AI score0.00326EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•54 views

PT-2024-39762 · WordPress · Order Notification For Telegram

Name of the Vulnerable Software and Affected Versions: The Order Notification for Telegram plugin for WordPress versions up to, and including, 1.0.1 Description: The issue allows unauthorized test message sending due to a missing capability check on the nktgnfw send test message function. This...

5.3CVSS6.6AI score0.00326EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/25 12:00 a.m.•6 views

CVE-2024-9686: Missing Authorization

The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nktgnfwsendtestmessage' function in versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to send a test messa...

5.3CVSS5.7AI score0.00326EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/25 12:00 a.m.•17 views

WordPress plugin Order Notification for Telegram 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

5.3CVSS6.5AI score0.00326EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/10/24 9:45 p.m.•24 views

WordPress Order Notification for Telegram plugin <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Message vulnerability

Missing Authorization to Unauthenticated Send Telegram Test Message vulnerability discovered by István Márton in WordPress Plugin Order Notification for Telegram versions = 1.0.1...

5.3CVSS7AI score0.00326EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/10/24 9:15 p.m.•25 views

CVE-2024-10327

A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...

8.1CVSS0.00595EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/24 8:17 p.m.•16 views

CVE-2024-10327

A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...

8.1CVSS6.6AI score0.00595EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/24 8:17 p.m.•60 views

CVE-2024-10327

CVE-2024-10327 affects Okta Verify for iOS 9.25.1 (beta)–9.27.0 (including beta). The vulnerability allows push notification responses via the iOS ContextExtension to authenticate regardless of user choice, across scenarios: locked-screen replies, home-screen drag-and-reply, and Apple Watch repli...

8.1CVSS6.4AI score0.00595EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/24 8:17 p.m.•30 views

CVE-2024-10327

A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...

8.1CVSS0.00595EPSS
SaveExploits0References2
Circl
Circl
•added 2024/10/24 10:57 a.m.•19 views

CVE-2024-6049

creationtimestamp| type| source ---|---|--- 2024-10-24 10:57:52+00:00| seen| https://t.me/cvedetector/8778...

7.5CVSS8.7AI score0.04235EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•9 views

CVE-2024-10327: Improper Authentication

A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...

8.1CVSS5.8AI score0.00595EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/24 12:00 a.m.•41 views

WordPress Order Notification for Telegram Plugin <= 1.0.1 is vulnerable to Broken Access Control

Software Order Notification for Telegram Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-9686 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c9ae0bfdb3a8 Credits István Márton...

5.3CVSS6.5AI score0.00326EPSS
SaveExploits0References2Affected Software1
Microsoft KB
Microsoft KB
•added 2024/10/24 12:00 a.m.•20 views

October 24, 2024—KB5044384 (OS Build 26100.2161) Preview

None None...

6.1AI score
SaveExploits0
osv_bell
osv_bell
•added 2024/10/23 5:58 a.m.•8 views

BELL-CVE-2024-50048

Bulletin has no description...

5.5CVSS7.3AI score0.00248EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2024/10/23 5:58 a.m.•9 views

BELL-CVE-2024-49986

Bulletin has no description...

7.8CVSS8.3AI score0.00248EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2024/10/23 5:57 a.m.•10 views

BELL-CVE-2024-49859

Bulletin has no description...

4.7CVSS7AI score0.00166EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2024/10/23 5:57 a.m.•7 views

BELL-CVE-2024-50055

Bulletin has no description...

7.8CVSS8AI score0.00254EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2024/10/23 5:57 a.m.•8 views

BELL-CVE-2024-50024

Bulletin has no description...

5.5CVSS7.3AI score0.00279EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2024/10/23 5:57 a.m.•7 views

BELL-CVE-2024-49975

Bulletin has no description...

5.5CVSS7.5AI score0.0025EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2024/10/23 5:57 a.m.•8 views

BELL-CVE-2024-49934

Bulletin has no description...

4.6CVSS7AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder