Lucene search
+L

12016 matches found

NVD
NVD
•added 2024/12/06 2:15 p.m.•32 views

CVE-2024-10516

The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...

8.1CVSS0.06436EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2024/12/06 1:45 p.m.•26 views

CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'

The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...

8.1CVSS8AI score0.06436EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2024/12/06 1:45 p.m.•48 views

CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'

The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...

8.1CVSS0.06436EPSS
SaveExploits2References4
Akamai Blog
Akamai Blog
•added 2024/12/06 1:00 p.m.•21 views

Akamai IP Accelerator: A Holistic Approach to Security and Performance

...

7.3AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2024/12/06 11:24 a.m.•106 views

Exploit for CVE-2024-10516

CVE-2024-10516 Swift Performance Lite = 2.3.7.1 - Unauthentic...

8.1CVSS8.3AI score0.06436EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2024/12/06 7:41 a.m.•35 views

CVE-2024-52798

A flaw was found in path-to-regexp. A path-to-regexp turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Mitigation Avoid using two parameters within a single path segment when the separato...

5.3CVSS6.7AI score0.00932EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/12/06 12:00 a.m.•8 views

PT-2024-16334

Name of the Vulnerable Software and Affected Versions Swift Performance Lite plugin for WordPress versions up to, and including, 2.3.7.1 Description The issue allows unauthenticated attackers to include and execute arbitrary files on the server via the ajaxify function, enabling the execution of...

8.1CVSS0.06436EPSS
SaveExploits2References7
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•21 views

WordPress plugin Swift Performance Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

8.1CVSS8AI score0.06436EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•10 views

CVE-2024-10516: Improper Limitation of a Pathname to a Restricted Directory

The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...

8.1CVSS6.3AI score0.06436EPSS
SaveExploits2References1
osv_azl
osv_azl
•added 2024/12/05 11:15 p.m.•17 views

AZL-54017 CVE-2024-52798 affecting package nodejs-nodemon 2.0.3-4

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

8.7CVSS6.8AI score0.00787EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/05 11:15 p.m.•36 views

CVE-2024-52798

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

8.7CVSS0.00787EPSS
SaveExploits0References3
Mend
Mend
•added 2024/12/05 10:45 p.m.•2 views

CVE-2024-52798

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

8.7CVSS0.00787EPSS
SaveExploits0References8
CVE
CVE
•added 2024/12/05 10:45 p.m.•4592 views

CVE-2024-52798

CVE-2024-52798 concerns the path-to-regexp library. The DoS arises when path-to-regexp outputs regex patterns that backtrack, enabling high CPU/blocked event loop in vulnerable inputs. Public sources reference the 0.1.x line as the origin and recommend upgrading specifically to 0.1.12; later advi...

8.7CVSS6.8AI score0.00787EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/05 10:45 p.m.•51 views

CVE-2024-52798 path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

8.7CVSS6.8AI score0.00787EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/12/05 10:45 p.m.•28 views

CVE-2024-52798 path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

8.7CVSS6.9AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/12/05 10:45 p.m.•34 views

CVE-2024-52798

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

8.7CVSS6.8AI score0.00787EPSS
SaveExploits0
osv_suse
osv_suse
•added 2024/12/05 5:33 p.m.•21 views

SUSE-SU-2024:4216-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005559 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix...

9.8CVSS7.1AI score0.00828EPSS
SaveExploits1References51
HackRead
HackRead
•added 2024/12/05 5:32 p.m.•27 views

The Future of eCommerce: How Custom Apps Help You Get Ahead of the Competition

Discover the future of eCommerce with bespoke app development. Learn how tailored solutions enhance user experience, security, and performance while empowering businesses to meet unique needs and gain a competitive edge...

7.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•11 views

path-to-regexp 安全漏洞

Path-to-RegExp is an open source tool from pillarjs. It is used to convert path strings to regular expressions. A security vulnerability exists in versions prior to path-to-regexp 0.1.12. An attacker exploiting this vulnerability can cause poor performance...

8.7CVSS6.7AI score0.00787EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•4 views

CVE-2024-52798: Inefficient Regular Expression Complexity

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

8.7CVSS6.7AI score0.00787EPSS
SaveExploits0References1
Rows per page
Query Builder