Lucene search
+L

2472 matches found

Positive Technologies
Positive Technologies
added 2023/03/01 12:00 a.m.11 views

PT-2023-11914 · Ibm · Ibm Financial Transaction Manager For Digital Payments

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager for Digital Payments for Multi-Platform versions 3.2.0 through 3.2.7 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the...

7.5CVSS6.4AI score0.00746EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/03/01 12:00 a.m.7 views

WordPress plugin Mercado Pago payments for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS7.7AI score0.00285EPSS
SaveExploits0References3
NVD
NVD
added 2023/02/28 3:15 p.m.28 views

CVE-2023-23865

Cross-Site Request Forgery CSRF vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin = 1.4.10 leads to settings change...

4.3CVSS4.7AI score0.00231EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/28 3:15 p.m.11 views

CVE-2023-23865

Cross-Site Request Forgery CSRF vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin = 1.4.10 leads to settings change...

4.3CVSS5.8AI score0.00231EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/28 3:15 p.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin = 1.4.10 leads to settings change...

4.3CVSS4.7AI score0.00231EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/02/28 2:45 p.m.50 views

CVE-2023-23865

CVE-2023-23865 affects WordPress Stripe Payments For WooCommerce by Checkout Plugin. Vulnerable until version 1.4.10 includes a Cross-Site Request Forgery (CSRF) flaw that can cause settings changes. Exploitation vector: unauthenticated users could trigger actions via CSRF; impact is limited to t...

4.3CVSS4.6AI score0.00231EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/28 2:45 p.m.35 views

CVE-2023-23865 WordPress Stripe Payments For WooCommerce by Checkout Plugin <= 1.4.10 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin = 1.4.10 leads to settings change...

4.3CVSS5AI score0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/02/28 2:45 p.m.9 views

CVE-2023-23865 WordPress Stripe Payments For WooCommerce by Checkout Plugin <= 1.4.10 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Checkout Plugins Stripe Payments For WooCommerce plugin = 1.4.10 leads to settings change...

4.3CVSS4.7AI score0.00231EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2023/02/28 12:00 a.m.18 views

Stripe Payments For WooCommerce by Checkout < 1.4.11 - Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, which could allow attackers to make logged in admins perform such action via a CSRF attack...

4.3CVSS5.1AI score0.00231EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/28 12:00 a.m.7 views

PT-2023-19265 · WordPress · Checkout Plugins Stripe Payments For Woocommerce

Name of the Vulnerable Software and Affected Versions: Checkout Plugins Stripe Payments For WooCommerce plugin versions 1.4.10 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can lead to changes in settings. Recommendations: For versions...

4.3CVSS4.5AI score0.00231EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/28 12:00 a.m.8 views

WordPress plugin Stripe Payments For WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS4.9AI score0.00231EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/02/27 12:00 a.m.35 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0061-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0061-1 advisory. - Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the render...

8.8CVSS8.6AI score0.00668EPSS
SaveExploits0References18
Microsoft CVE
Microsoft CVE
added 2023/02/25 8:00 a.m.40 views

Chromium: CVE-2023-0927 Use after free in Web Payments API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.7AI score0.00579EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2023/02/25 12:00 a.m.48 views

KLA40224 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Video can be exploited to execute arbitrary code or cause...

8.8CVSS10AI score0.00668EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2023/02/24 3:07 a.m.7 views

SUSE CVE-2023-0927

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.3AI score0.00579EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/02/23 12:00 a.m.49 views

FreeBSD : chromium -- multiple vulnerabilities (4d6b5ea9-bc64-4e77-a7ee-d62ba68a80dd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4d6b5ea9-bc64-4e77-a7ee-d62ba68a80dd advisory. - Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allow...

8.8CVSS8.5AI score0.00668EPSS
SaveExploits0References10
NVD
NVD
added 2023/02/22 8:15 p.m.17 views

CVE-2023-0927

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score0.00579EPSS
SaveExploits0References3
OSV
OSV
added 2023/02/22 8:15 p.m.4 views

DEBIAN-CVE-2023-0927

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.00579EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/22 8:15 p.m.34 views

Design/Logic Flaw

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.8CVSS8.7AI score0.00579EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2023/02/22 8:15 p.m.30 views

CVE-2023-0927

Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.00579EPSS
SaveExploits0References3
Rows per page
Query Builder