Lucene search
+L

2464 matches found

Cvelist
Cvelist
added 2024/10/15 8:14 p.m.26 views

CVE-2024-9964

Inappropriate implementation in Payments in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...

0.00288EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/15 12:00 a.m.31 views

Google Chrome < 130.0.6723.58 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 130.0.6723.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop15 advisory. - Use after free in AI. CVE-2024-9954 - Use after free in Web Authentication...

8.8CVSS6.8AI score0.04942EPSS
SaveExploits3References27
FreeBSD
FreeBSD
added 2024/10/15 12:00 a.m.21 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 17 security fixes: 367755363 High CVE-2024-9954: Use after free in AI. Reported by DarkNavy on 2024-09-18 370133761 Medium CVE-2024-9955: Use after free in Web Authentication. Reported by anonymous on 2024-09-29 370482421 Medium CVE-2024-9956:...

8.8CVSS7.8AI score0.04942EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.11 views

编号撤回

RedSys 3DSecure is a payment security technology from RedSys, Spain, designed to improve the security of online transactions, especially during credit and debit card payments. This CVE number has been withdrawn...

6.8AI score
SaveExploits1References3
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.9 views

编号撤回

RedSys 3DSecure is a payment security technology from RedSys, Spain, designed to improve the security of online transactions, especially during credit and debit card payments. This CVE number has been withdrawn...

6.8AI score
SaveExploits1References3
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.12 views

编号撤回

RedSys 3DSecure is a payment security technology from RedSys, Spain, designed to improve the security of online transactions, especially during credit and debit card payments. This CVE number has been withdrawn...

6.8AI score
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.9 views

编号撤回

RedSys 3DSecure is a payment security technology from RedSys, Spain, designed to improve the security of online transactions, especially during credit and debit card payments. This CVE number has been withdrawn...

6.8AI score
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/09/24 12:00 a.m.23 views

PT-2024-39315

Name of the Vulnerable Software and Affected Versions: Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam plugin for WordPress versions up to, and including, 2.0.1 Description: The issue is related to Stored Cross-Site Scripting due to the incorrect use of the w...

7.2CVSS5.6AI score0.00328EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2024/09/08 3:46 a.m.4 views

SUSE CVE-2021-21151

Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS9.2AI score0.01139EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/09/03 12:00 a.m.8 views

PT-2024-10275 · Ibm · Ibm Safer Payments

Name of the Vulnerable Software and Affected Versions: IBM Safer Payments versions 6.4.0.00 through 6.4.2.07 IBM Safer Payments versions 6.5.0.00 through 6.5.0.05 IBM Safer Payments versions 6.6.0.00 through 6.6.0.03 Description: The issue is related to the improper allocation of resources, which...

7.8CVSS7.1AI score0.00589EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2024/09/02 12:00 a.m.16 views

The vulnerability of the Autofill Payments function in browsers Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Autofill Payments function in Google Chrome and Microsoft Edge browsers relates to the possibility of exploiting memory after deallocation. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created HTML page...

10CVSS7.7AI score0.00575EPSS
SaveExploits0References11Affected Software7
Packet Storm
Packet Storm
added 2024/09/01 12:00 a.m.268 views

Wordpress Plugin WooCommerce Payments Unauthenticated Admin Creation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress Plugin WooCommerce Payments Unauthenticated Admin Creation', 'Description' = %q WooCommerce-Payments plugin for Wordpress versions 4.8'...

9.8CVSS7.2AI score0.8651EPSS
SaveExploits9
OSV
OSV
added 2024/08/28 4:15 a.m.11 views

CVE-2024-6448

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

5.3CVSS5.7AI score0.00452EPSS
SaveExploits0References3
NVD
NVD
added 2024/08/28 4:15 a.m.29 views

CVE-2024-6448

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

5.3CVSS0.00452EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/08/28 3:27 a.m.24 views

CVE-2024-6448 Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

5.3CVSS5.3AI score0.00452EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/08/28 3:27 a.m.42 views

CVE-2024-6448 Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

5.3CVSS0.00452EPSS
SaveExploits0References3
CVE
CVE
added 2024/08/28 3:27 a.m.87 views

CVE-2024-6448

CVE-2024-6448 affects Mollie Payments for WooCommerce for WordPress. All versions up to 7.7.0 expose information due to error reporting being enabled by default in multiple plugin files, allowing unauthenticated attackers to obtain the full path to the WordPress instance. The disclosure is descri...

5.3CVSS5.3AI score0.00452EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/08/28 3:20 a.m.10 views

WordPress Mollie Payments for WooCommerce plugin <= 7.7.0 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Mollie Payments for WooCommerce versions = 7.7.0...

5.3CVSS7AI score0.00452EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/08/28 12:00 a.m.16 views

WordPress Mollie Payments for WooCommerce Plugin <= 7.7.0 is vulnerable to Full Path Disclosure (FPD)

Software Mollie Payments for WooCommerce Type Plugin Vulnerable versions = 7.7.0 Fixed in 7.8.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Full Path Disclosure FPD CVE CVE-2024-6448 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 442e1f30b6d2 Credits...

5.3CVSS6.6AI score0.00452EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/08/28 12:00 a.m.7 views

WordPress plugin Mollie Payments for WooCommerce 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...

5.3CVSS6.2AI score0.00452EPSS
SaveExploits0References4
Rows per page
Query Builder