Lucene search
+L

21056 matches found

BDU FSTEC
BDU FSTEC
added 2024/12/03 12:00 a.m.14 views

The vulnerability of the dsUnclaimHub command on the OvrC Pro cloud-based IT infrastructure management platform allows a hacker to gain unauthorized access to add or remove network devices.

The vulnerability of the dsUnclaimHub command on the OvrC Pro IT-infrastructure management cloud platform relates to the ability to send requests to the database without going through authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...

9.4CVSS8.1AI score0.00538EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/03 12:00 a.m.12 views

The vulnerability of the OMRON CX-Motion Pro controller management program lies in the improper restriction of references to external XML entities (XXE). This allows attackers to access protected information.

The vulnerability of the OMRON CX-Motion Pro controller management program is related to an improper restriction on references to external XML entities XXE. Exploiting this vulnerability may allow a perpetrator to access protected information through a specially created project file...

5.5CVSS5.9AI score0.00211EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/03 12:00 a.m.10 views

The vulnerability of the OvrC Pro cloud-based IT infrastructure management platform, related to the bypassing of authentication mechanisms through spoofing techniques, allows attackers to gain unauthorized access to protected information.

The vulnerability of the OvrC Pro cloud-based IT infrastructure management platform is related to bypassing authentication using spoofing techniques due to incorrect processing of MAC addresses. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...

7.8CVSS5.5AI score0.005EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/29 12:00 a.m.11 views

The vulnerability of Intel Quartus Prime Pro operating system-based automated design systems relates to an uncontrolled search path element, which allows a malicious individual to escalate their privileges.

The vulnerability of Intel Quartus Prime Pro operating system-based automated design systems relates to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00159EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/29 12:00 a.m.16 views

The vulnerability of Intel High Level Synthesis (HLS) compiler in Intel Quartus Prime Pro automated design systems allows attackers to enhance their privileges.

The vulnerability of Intel High Level Synthesis HLS compiler in the Intel Quartus Prime Pro automated design software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00175EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/11/28 9:15 a.m.26 views

CVE-2024-8066

The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation in the 'fsConnector' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted...

8.8CVSS0.01146EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/28 9:15 a.m.42 views

CVE-2024-9669

The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fmlocale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute...

7.2CVSS0.00976EPSS
SaveExploits0References5
CVE
CVE
added 2024/11/28 8:47 a.m.97 views

CVE-2024-9669

The CVE-2024-9669 entry describes an Local JavaScript File Inclusion vulnerability in WordPress File Manager Pro – Filester plugin (versions

7.2CVSS9.1AI score0.00976EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2024/11/28 8:47 a.m.27 views

CVE-2024-9669 File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion

The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fmlocale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute...

7.2CVSS0.00976EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/11/28 8:47 a.m.20 views

CVE-2024-9669 File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion

The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fmlocale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute...

7.2CVSS9.1AI score0.00976EPSS
SaveExploits0References5
CVE
CVE
added 2024/11/28 8:47 a.m.90 views

CVE-2024-8066

CVE-2024-8066 affects File Manager Pro – Filester plugin for WordPress (all versions up to and including 1.8.6). The vulnerability stems from missing validation in the fsConnector function, enabling authenticated users with Subscriber-level access (and with permissions granted by an Administrator...

8.8CVSS7.9AI score0.01146EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/28 8:47 a.m.18 views

CVE-2024-8066 File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload

The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation in the 'fsConnector' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted...

7.5CVSS7.9AI score0.01146EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/28 8:47 a.m.17 views

CVE-2024-8066 File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload

The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation in the 'fsConnector' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted...

7.5CVSS0.01146EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/28 12:00 a.m.8 views

WordPress plugin File Manager Pro – Filester 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A code issue vulnerability exist...

8.8CVSS8.5AI score0.01146EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/28 12:00 a.m.8 views

WordPress plugin File Manager Pro – Filester 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A path traversal...

7.2CVSS8.4AI score0.00976EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/28 12:00 a.m.21 views

PT-2024-38782 · WordPress · File Manager Pro – Filester

Name of the Vulnerable Software and Affected Versions: File Manager Pro – Filester plugin for WordPress versions up to, and including, 1.8.6 Description: The issue is related to arbitrary file uploads due to missing validation in the fsConnector function. This allows authenticated attackers with...

8.8CVSS8.2AI score0.01146EPSS
SaveExploits0References10
Patchstack
Patchstack
added 2024/11/27 10:10 p.m.10 views

WordPress File Manager Pro – Filester plugin <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by TANG Cheuk Hei siunam in WordPress Plugin File Manager Pro versions = 1.8.4...

8.8CVSS7AI score0.01146EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/11/27 12:56 a.m.9 views

MAL-2024-11103 Malicious code in ssc-element-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01113947a4ee68f7ef0576560b8c2f606aa927e069fb821a064451615c2ac404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/27 12:56 a.m.8 views

Malicious code in ssc-element-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01113947a4ee68f7ef0576560b8c2f606aa927e069fb821a064451615c2ac404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/27 12:14 a.m.8 views

Malicious code in ssc-user-guide-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b28cdf39e031f4bad55901266218e082e89ddc065dddc3334657fbaf84b7045b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder