Lucene search
+L

6158 matches found

Tenable Nessus
Tenable Nessus
•added 2022/11/18 12:00 a.m.•54 views

MariaDB 10.1.0 < 10.1.33 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.33. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.33 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.3...

7.7CVSS6.3AI score0.04016EPSS
SaveExploits0References17
CNVD
CNVD
•added 2022/11/17 12:00 a.m.•22 views

WordPress reSmush.it Image Optimizer License Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

4.3CVSS6.6AI score0.00529EPSS
SaveExploits2References1
NVD
NVD
•added 2022/11/14 3:15 p.m.•35 views

CVE-2022-2450

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

4.3CVSS0.00529EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2022/11/14 3:15 p.m.•22 views

CVE-2022-2450

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

4.3CVSS5.8AI score0.00529EPSS
SaveExploits2References1
Prion
Prion
•added 2022/11/14 3:15 p.m.•25 views

Design/Logic Flaw

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

4CVSS4.7AI score0.00529EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/11/14 12:00 a.m.•49 views

CVE-2022-2450 reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

5AI score0.00529EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2022/11/14 12:00 a.m.•39 views

CVE-2022-2449 reSmush.it Image Optimizer < 0.4.7 - Multiple CSRF

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site...

6.7AI score0.00354EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/14 12:00 a.m.•8 views

CVE-2022-2449: Cross-Site Request Forgery (CSRF)

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site...

6.5CVSS5.9AI score0.00354EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2022/11/14 12:00 a.m.•7 views

CVE-2022-2449 reSmush.it Image Optimizer < 0.4.7 - Multiple CSRF

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF checks for any of its AJAX actions, allowing an attackers to trick logged in users to perform various actions on their behalf on the site...

7.1AI score0.00354EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2022/11/14 12:00 a.m.•11 views

CVE-2022-2450 reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

7AI score0.00529EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/14 12:00 a.m.•9 views

CVE-2022-2450: Missing Authorization

The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in various AJAX actions, allowing any logged-in users, such as subscribers to call them...

4.3CVSS5.9AI score0.00529EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•13 views

WordPress Plugin reSmush.it Image Optimizer Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

6.5CVSS6.3AI score0.00354EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•20 views

WordPress Plugin reSmush.it Image Optimizer has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

4.3CVSS6.7AI score0.00529EPSS
SaveExploits2References3
Veracode
Veracode
•added 2022/11/10 12:32 a.m.•28 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

4.9CVSS5.8AI score0.01721EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:31 a.m.•30 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01683EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/11/10 12:31 a.m.•28 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

5.5CVSS6AI score0.01577EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:31 a.m.•31 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

5.5CVSS6AI score0.01651EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/11/10 12:31 a.m.•38 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01852EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/11/10 12:30 a.m.•27 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01841EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
•added 2022/11/10 12:30 a.m.•36 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component, allowing an attacker to cause an application crash through the multiple protocols...

4.9CVSS5.9AI score0.01252EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder