Lucene search
+L

53 matches found

OSV
OSV
added 2024/01/05 8:15 a.m.8 views

CVE-2023-52150

Cross-Site Request Forgery CSRF vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5...

8.8CVSS7.3AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/05 8:15 a.m.18 views

CVE-2023-52150

Cross-Site Request Forgery CSRF vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5...

8.8CVSS8.8AI score0.00274EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/05 8:15 a.m.21 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5...

6.8CVSS7.3AI score0.00274EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/01/05 8:07 a.m.61 views

CVE-2023-52150

Technical details for CVE-2023-52150 are not publicly available in the provided Connected Documents. Monitor for updates.

8.8CVSS8.5AI score0.00274EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2023/03/12 9:59 p.m.16 views

ovation-wellness.com Cross Site Scripting vulnerability OBB-3219988

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Wired Threat Level
Wired Threat Level
added 2023/02/08 10:44 p.m.20 views

The Political Theater Behind the State of the Union Data Privacy Push

Biden’s speech calling for better data protections got a standing ovation from both sides of the aisle. So, where’s a federal privacy law?...

1.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.12 views

The vulnerability of many protocols in the Ovation distributed system management framework stems from deficiencies in the authentication process. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of many protocols in the Ovation distributed system management framework is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service...

10CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.13 views

The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and cause service...

10CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.23 views

The vulnerabilities of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as the DeltaV/Ovation SIS emergency protection system, allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as of the emergency protection system DeltaV/Ovation SIS, is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a maliciou...

7.8CVSS5.5AI score0.00149EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/12 12:00 a.m.27 views

Wordpress plugin Controlled Admin Access 访问控制错误漏洞

WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in multiple Wordpress plugins that allows an attacker to use this endpoint to add arbitrary data to predefined options in the wpoptions table. The following products and versions are affected: The...

5.3CVSS5.9AI score0.02059EPSS
SaveExploits2References3
NVD
NVD
added 2021/03/19 3:15 a.m.16 views

CVE-2021-3327

Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...

5.4CVSS0.00656EPSS
SaveExploits1References2
OSV
OSV
added 2021/03/19 3:15 a.m.9 views

CVE-2021-3327

Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...

5.4CVSS6.1AI score0.00656EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/03/19 3:15 a.m.8 views

CVE-2021-3327

Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...

5.4CVSS6AI score0.00656EPSS
SaveExploits1References3
Prion
Prion
added 2021/03/19 3:15 a.m.20 views

Design/Logic Flaw

Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...

3.5CVSS5.3AI score0.00656EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/03/19 2:52 a.m.24 views

CVE-2021-3327

Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the posttitle parameter...

5.5AI score0.00656EPSS
SaveExploits1References2
CVE
CVE
added 2021/03/19 2:52 a.m.81 views

CVE-2021-3327

CVE-2021-3327 affects Ovation Dynamic Content 1.10.1 for Elementor, with a stored/ reflected cross-site scripting flaw exploitable via the post_title parameter. The connected materials confirm the product/version and the vulnerability class but do not provide exploit details, affected configurati...

5.4CVSS5.2AI score0.00656EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/03/18 12:00 a.m.13 views

Elementor 跨站脚本漏洞

Elementor is a WordPress page builder from the Elementor team that offers a variety of design elements and supports custom templates and more. A cross-site scripting vulnerability exists in Elementor Ovation Dynamic Content version 1.10.1. The vulnerability is related to the posttitle parameter. ...

5.4CVSS5.2AI score0.00656EPSS
SaveExploits1References3
Prion
Prion
added 2019/05/28 10:29 p.m.26 views

Stack overflow

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote...

6.5CVSS9.3AI score0.03751EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/05/28 10:29 p.m.33 views

CVE-2019-10967

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote...

8.8CVSS9.4AI score0.03751EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/28 10:29 p.m.11 views

CVE-2019-10967

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote...

8.8CVSS8.2AI score0.03751EPSS
SaveExploits0References2
Rows per page
Query Builder