Lucene search
K

4770 matches found

CNNVD
CNNVD
added 2022/10/17 12:0 a.m.4 views

WordPress plugin AB Press Optimizer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS6.2AI score0.00396EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/10/12 4:31 p.m.3 views

CVE-2022-26375

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology AB Press Optimizer plugin = 1.1.1 on WordPress...

4.8CVSS5.1AI score0.00396EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2022/10/12 12:0 a.m.21 views

WordPress AB Press Optimizer plugin <= 1.1.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by ptsfence Patchstack Alliance in WordPress AB Press Optimizer plugin versions = 1.1.1. Solution No patched version is available. No reply from the vendor...

4.8CVSS2.9AI score0.00396EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2022/10/10 12:0 a.m.15 views

CVE-2022-2448 reSmush.it Image Optimizer < 0.4.6 - Admin+ Cross-Site Scripting

The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

5AI score0.00506EPSS
Exploits2References1
Code423n4
Code423n4
added 2022/10/10 12:0 a.m.10 views

USE OF SOLIDITY VERSION 0.8.14 WHICH HAS KNOWN ISSUES APPLICABLE TO Blur Exchange

Lines of code Vulnerability details Vulnerability details Vulnerability related to ‘Optimizer Bug Regarding Memory Side Effects of Inline Assembly’ ref : Blur Exchange inherits solidity contracts from openzeppelin and these uses inline assembly, and optimization is enabled while compiling...

6.9AI score
Exploits0
CNVD
CNVD
added 2022/09/28 12:0 a.m.21 views

WordPress Kraken.io Image Optimizer Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.7AI score0.00285EPSS
Exploits0References1
OSV
OSV
added 2022/09/23 7:15 p.m.1 views

CVE-2022-38454

Cross-Site Request Forgery CSRF vulnerability in Kraken.io Image Optimizer plugin = 2.6.5 at WordPress...

8.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2022/09/23 7:15 p.m.11 views

CVE-2022-38454

Cross-Site Request Forgery CSRF vulnerability in Kraken.io Image Optimizer plugin = 2.6.5 at WordPress...

8.8CVSS0.00285EPSS
Exploits0References2
Prion
Prion
added 2022/09/23 7:15 p.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Kraken.io Image Optimizer plugin = 2.6.5 at WordPress...

6.8CVSS8.8AI score0.00285EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/23 6:36 p.m.8 views

CVE-2022-38454 WordPress Kraken.io Image Optimizer plugin <= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Kraken.io Image Optimizer plugin = 2.6.5 at WordPress...

5.4CVSS6.4AI score0.00285EPSS
Exploits0References2
CVE
CVE
added 2022/09/23 6:36 p.m.66 views

CVE-2022-38454

The CVE-2022-38454 entry affects the WordPress Kraken.io Image Optimizer plugin, versions

8.8CVSS7.1AI score0.00285EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/09/23 11:4 a.m.2 views

OESA-2022-1960 mysql security update

Security Fixes: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

7.9CVSS5.1AI score0.46751EPSS
Exploits1References45
Patchstack
Patchstack
added 2022/09/23 12:0 a.m.23 views

WordPress Kraken.io Image Optimizer plugin <= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability was discovered by Rasi Afeef Patchstack Alliance in the WordPress Kraken.io Image Optimizer plugin versions = 2.6.5. Solution Update the WordPress Kraken.io Image Optimizer plugin to the latest available version at least 2.6.6...

8.8CVSS4.1AI score0.00285EPSS
Exploits0Affected Software1
WPVulnDB
WPVulnDB
added 2022/09/23 12:0 a.m.29 views

Kraken.io Image Optimizer < 2.6.6 - Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, which could allow attackers to make logged in admin change them via a CSRF attack...

8.8CVSS4.5AI score0.00285EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/23 12:0 a.m.2 views

PT-2022-24413 · Kraken.Io · Kraken.Io Image Optimizer

Name of the Vulnerable Software and Affected Versions: Kraken.io Image Optimizer plugin versions = 2.6.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

8.8CVSS8.6AI score0.00285EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.4 views

WordPress plugin Kraken.io Image Optimizer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.8AI score0.00285EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/09/22 12:0 a.m.51 views

Oracle Linux 9 : mysql (ELSA-2022-6590)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6590 advisory. 8.0.30-3 - Release bump for rebuild 8.0.30-1 - Update to MySQL 8.0.30 - Remove patches now upstream: chain certs, OpenSSL 3, s390 and robin hood - Add ...

6.5CVSS6.4AI score0.01939EPSS
Exploits0References45
RedHat Linux
RedHat Linux
added 2022/09/20 1:42 p.m.2 views

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS7.3AI score0.01321EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/09/20 1:42 p.m.4 views

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS7.3AI score0.01216EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/09/20 1:42 p.m.2 views

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

5.5CVSS7.3AI score0.01054EPSS
Exploits0References4
Rows per page
Query Builder