Lucene search
+L

109 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•3 views

CVE-2024-34556: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through =...

5.3CVSS5.8AI score0.00585EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/09 12:09 p.m.•48 views

CVE-2024-34556 WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through =...

5.3CVSS5.9AI score0.00585EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/09 11:40 a.m.•50 views

CVE-2024-34557

CVE-2024-34557 : CSRF vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager (WordPress plugin). Affected: Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.4. Description in connected sources confirms CSRF risk; exploitation could allow unauthorized action...

4.3CVSS5.9AI score0.0025EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/09 11:40 a.m.•10 views

CVE-2024-34557 WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through = 1.5.4...

4.3CVSS5.2AI score0.0025EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/05/07 9:34 a.m.•14 views

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.5.4...

4.3CVSS7AI score0.0025EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/05/07 9:33 a.m.•7 views

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability

Sensitive Data Exposure via Exported File vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.5.4...

5.3CVSS7AI score0.00585EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/05/07 12:00 a.m.•22 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.4 is vulnerable to Sensitive Data Exposure

Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.5.5 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-34556 Patch priority Low CVSS severity Low 5.3 Developer DMitry PSID 3b6260611936 Credits...

5.3CVSS6.5AI score0.00585EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/05/07 12:00 a.m.•16 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.5.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34557 Patch priority Low CVSS severity Low 4.3 Developer DMitry PSID 2014d221439f Credi...

4.3CVSS6.6AI score0.0025EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/04/30 12:00 a.m.•13 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.4 is vulnerable to SQL Injection

Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.5.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-2661 Patch priority High CVSS severity High 8.5 Developer DMitry PSID 7524c36d6a64 Credits Peter Thaleikis Required...

8.8CVSS6.8AI score0.00613EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2024/04/25 1:20 p.m.•11 views

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.3 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.5.3...

9.8CVSS7AI score0.00501EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/25 1:18 p.m.•12 views

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.3 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.5.3...

9.1CVSS7AI score0.00413EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/25 12:00 a.m.•21 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.3 is vulnerable to Privilege Escalation

Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-33567 Patch priority High CVSS severity High 9.8 Developer DMitry PSID...

9.8CVSS6.5AI score0.00501EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/04/25 12:00 a.m.•28 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.3 is vulnerable to Broken Access Control

Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33565 Patch priority High CVSS severity High 9.1 Developer DMitry PSID 256e9c100507 Credits Rafie...

9.1CVSS6.5AI score0.00413EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/04/16 12:00 a.m.•17 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.3 is vulnerable to Broken Access Control

Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32589 Patch priority Medium CVSS severity Medium 7.1 Developer DMitry PSID 1f47371c73ec Credits...

6.5AI score0.00171EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
•added 2024/03/20 12:00 a.m.•22 views

Barcode Scanner with Inventory & Order Manager < 1.5.4 - Reflected Cross-Site Scripting

Description The Barcode Scanner with Inventory & Order Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.1CVSS6.3AI score0.00375EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/03/19 5:15 p.m.•21 views

CVE-2024-27998

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory &...

7.1CVSS6.9AI score0.00375EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/19 4:46 p.m.•15 views

CVE-2024-27998 WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory &...

7.1CVSS7.2AI score0.00375EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/19 4:46 p.m.•75 views

CVE-2024-27998

The Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This flaw affects versions up to and including 1.5.3 . An unauthenticated...

7.1CVSS7.2AI score0.00375EPSS
SaveIn wildExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/19 12:00 a.m.•0 views

CVE-2024-27998: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory &...

7.1CVSS5.8AI score0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/03/19 12:00 a.m.•14 views

PT-2024-22196 · Ukrsolution · Ukrsolution Barcode Scanner With Inventory & Order Manager

Name of the Vulnerable Software and Affected Versions: UkrSolution Barcode Scanner with Inventory & Order Manager versions 1.5.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

7.1CVSS9.3AI score0.00375EPSS
SaveExploits0References4
Rows per page
Query Builder