Lucene search
+L

4868 matches found

WPVulnDB
WPVulnDB
added 2023/11/24 12:0 a.m.8 views

EWWW Image Optimizer < 7.2.1 - Sensitive Information Exposure

Description The EWWW Image Optimizer for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.2.0 due to the plugin saving debug logs in predictable locations. This can allow unauthenticated attackers to obtain information about installation paths, file...

6.8AI score
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2023/11/20 7:5 p.m.53 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Ewww Image_Optimizer

CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - Unauthentica...

7.5CVSS8.5AI score0.02036EPSS
SaveExploits1
OSV
OSV
added 2023/11/17 11:6 a.m.9 views

OESA-2023-1836 mysql security update

The MySQLTM software delivers a very fast, multi-threaded, multi-user, and robust SQL Structured Query Language database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or...

9.8CVSS6.1AI score0.43131EPSS
SaveExploits2References119
OSV
OSV
added 2023/11/17 11:6 a.m.5 views

OESA-2023-1834 mysql security update

The MySQLTM software delivers a very fast, multi-threaded, multi-user, and robust SQL Structured Query Language database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or...

9.8CVSS6.1AI score0.43131EPSS
SaveExploits2References119
OSV
OSV
added 2023/11/17 11:6 a.m.6 views

OESA-2023-1835 mysql security update

The MySQLTM software delivers a very fast, multi-threaded, multi-user, and robust SQL Structured Query Language database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or...

9.8CVSS6.1AI score0.43131EPSS
SaveExploits2References119
Fedora
Fedora
added 2023/11/14 1:57 a.m.22 views

[SECURITY] Fedora 38 Update: optipng-0.7.8-1.fc38

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

7.8CVSS7.7AI score0.00518EPSS
SaveExploits1
Fedora
Fedora
added 2023/11/14 1:46 a.m.19 views

[SECURITY] Fedora 39 Update: optipng-0.7.8-1.fc39

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

7.8CVSS7.7AI score0.00518EPSS
SaveExploits1
Fedora
Fedora
added 2023/11/14 1:10 a.m.29 views

[SECURITY] Fedora 37 Update: optipng-0.7.8-1.fc37

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

7.8CVSS7.7AI score0.00518EPSS
SaveExploits1
Patchstack
Patchstack
added 2023/11/14 12:0 a.m.26 views

WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

Software EWWW Image Optimizer Type Plugin Vulnerable versions = 7.2.0 Fixed in 7.2.1 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-40600 Patch priority Medium CVSS severity Medium 5.3 Developer Exactly WWW LLC PSID e83c448240a2 Credits Mika Required...

7.5CVSS6.4AI score0.02036EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2023/11/14 12:0 a.m.13 views

Fedora: Security Advisory (FEDORA-2023-125037736c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00518EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2023/11/14 12:0 a.m.13 views

Fedora: Security Advisory for optipng (FEDORA-2023-ae05c3bca8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00518EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/11/14 12:0 a.m.20 views

Fedora: Security Advisory for optipng (FEDORA-2023-f3389245ce)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00518EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.23 views

Rocky Linux 8 : mysql:8.0 (RLSA-2020:3732)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:3732 advisory. mysql: Server: Security: Privileges multiple unspecified vulnerabilities CVE-2020-14663, CVE-2020-14678, CVE-2020-14697, CVE-2020-2761, CVE-2020-2774,...

7.2CVSS6.5AI score0.03726EPSS
SaveExploits1References209
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.17 views

Fedora: Security Advisory for llvm-bolt (FEDORA-2023-67f0f8d186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00215EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/11/03 6:54 p.m.16 views

[SECURITY] Fedora 39 Update: polly-17.0.2-1.fc39

Polly is a high-level loop and data-locality optimizer and optimization infrastructure for LLVM. It uses an abstract mathematical representation based on integer polyhedron to analyze and optimize the memory access pattern of a program...

5.5CVSS5.5AI score0.00215EPSS
SaveExploits0
Fedora
Fedora
added 2023/11/03 6:54 p.m.19 views

[SECURITY] Fedora 39 Update: llvm-bolt-17.0.2-1.fc39

BOLT is a post-link optimizer developed to speed up large applications. It achieves the improvements by optimizing application's code layout based on execution profile gathered by sampling profiler, such as Linux perf tool...

5.5CVSS5.6AI score0.00215EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.10 views

The vulnerability of the Image Optimizer plugin by 10web, a content management system for WordPress, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Image Optimizer plugin of the 10web content management system for WordPress is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.4CVSS6.7AI score0.0085EPSS
SaveExploits2References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.4 views

SUSE CVE-2020-2892

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS6AI score0.02064EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.5 views

SUSE CVE-2020-2901

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS6AI score0.02592EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/31 2:31 a.m.4 views

SUSE CVE-2020-2923

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS6AI score0.02433EPSS
SaveExploits0References2
Rows per page
Query Builder