Lucene search
+L

27 matches found

ThreatPost
ThreatPost
added 2018/11/07 3:33 p.m.590 views

WordPress Flaw Opens Millions of WooCommerce Shops to Takeover

Up to 4 million online merchants who use the popular WooCommerce WordPress plugin are vulnerable to a file deletion vulnerability that could allow a rogue “shop manager” to escalate privileges and eventually execute remote code on impacted websites. Researchers at RIPS Technologies trace the bug ...

0.8AI score0.99407EPSS
SaveExploits56References5
Cvelist
Cvelist
added 2018/11/06 5:0 p.m.30 views

CVE-2018-9415

In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel...

7.1AI score0.00254EPSS
SaveExploits0References4
ripstech
ripstech
added 2018/11/06 11:0 a.m.18 views

WordPress Design Flaw Leads to WooCommerce RCE

Impact We detected and reported a file deletion vulnerability in WooCommerce, which was fixed in version 3.4.6. Arbitrary file deletion vulnerabilities arent considered critical in most cases as the only thing an attacker can cause is a Denial of Service by deleting the index.php of the website...

6.6AI score
SaveExploits0
NVD
NVD
added 2005/06/09 4:0 a.m.20 views

CVE-2005-1871

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."...

7.5CVSS6.9AI score0.01616EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2005/06/09 4:0 a.m.26 views

CVE-2005-1871

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."...

7.5CVSS6AI score0.01616EPSS
SaveExploits0References1
CVE
CVE
added 2005/06/07 4:0 a.m.62 views

CVE-2005-1871

CVE-2005-1871 affects Drupal 4.4.0–4.6.0 where an improperly implemented input check in the privilege system (triggered when public registration is enabled) allows remote attackers to escalate privileges. The issue is described as a privilege escalation vulnerability in multiple sources (Drupal a...

7.5CVSS6.9AI score0.01616EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2005/06/07 4:0 a.m.28 views

CVE-2005-1871

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."...

6.9AI score0.01616EPSS
SaveExploits0References4
Rows per page
Query Builder