Lucene search
+L

3954 matches found

Patchstack
Patchstack
added 2023/07/18 12:00 a.m.9 views

WordPress Protect Admin Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Protect Admin Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 90a7aabd2940 Credits Rafie Muhammad Patchstack Required...

6.5AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.18 views

WordPress Smart Protect Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Smart Protect Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e36cca3fb743 Credits Rafie Muhammad Patchstack Required...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/13 2:38 p.m.49 views

Security Bulletin: A vulnerability in IBM Storage Protect Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management can lead to denial of service (CVE-2023-33832)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for Hyper-V and Data Protection for VMware, and IBM Storage Protect for Space Management can be affected by a vulnerability that leads to denial of service. The vulnerability is describ...

6.2CVSS4.9AI score0.00132EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/13 1:22 p.m.38 views

Security Bulletin: A vulnerability in IBM GSKit affects IBM Storage Protect Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management (CVE-2023-32342)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for Hyper-V and Data Protection for VMware, and IBM Storage Protect for Space Management can be affected by a vulnerability in IBM GSKit. The vulnerability can lead to disclosure of...

7.5CVSS7.1AI score0.00925EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/13 1:21 p.m.51 views

Security Bulletin: Vulnerabilities in Xerces2 affect IBM Storage Protect Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management (CVE-2013-4002, CVE-2012-1724, CVE-2012-0881, CVE-2022-23437, CVE-2009-2625)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for Hyper-V and Data Protection for VMware, and IBM Storage Protect for Space Management can be affected by vulnerabilities in the Apache Xerces2 Java parser library. The vulnerabilitie...

7.8CVSS7.8AI score0.3038EPSS
SaveExploits2Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/13 1:20 p.m.52 views

Security Bulletin: Vulnerabilities in IBM Java affect IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management (CVE-2022-21426, CVE-2023-21830, CVE-2023-21843)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for Hyper-V and Data Protection for VMware, and IBM Storage Protect for Space Management can be affected by vulnerabilities in IBM Java. The vulnerabilities can lead to denial of servic...

5.3CVSS5.5AI score0.03117EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/13 1:19 p.m.38 views

Security Bulletin: Vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management (CVE-2023-0482, CVE-2023-24998)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for Hyper-V and Data Protection for VMware, and IBM Storage Protect for Space Management can be affected by vulnerabilities in IBM WebSphere Application Server Liberty. The...

7.5CVSS7.6AI score0.48788EPSS
SaveExploits1Affected Software3
NVD
NVD
added 2023/07/04 8:15 a.m.24 views

CVE-2023-3139

The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered...

6.1CVSS6.2AI score0.00734EPSS
SaveExploits1References2
Prion
Prion
added 2023/07/04 8:15 a.m.20 views

Design/Logic Flaw

The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered...

5.8CVSS6.2AI score0.00734EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/07/04 7:23 a.m.36 views

CVE-2023-3139 Protect WP Admin < 4.0 - Unauthenticated Protection Bypass

The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered...

6.4AI score0.00734EPSS
SaveExploits1References2
CVE
CVE
added 2023/07/04 7:23 a.m.92 views

CVE-2023-3139

Protect WP Admin WordPress plugin before 4.0 discloses the admin panel URL via a crafted URL redirection, bypassing protection. Root cause: redirection flaw enabling unauthenticated disclosure of the admin URL. Affected versions:

6.1CVSS6.5AI score0.00734EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/04 12:00 a.m.11 views

PT-2023-23296

Name of the Vulnerable Software and Affected Versions: Protect WP Admin WordPress plugin versions prior to 4.0 Description: The issue allows an attacker to disclose the URL of the admin panel via a redirection of a crafted URL, effectively bypassing the protection offered by the plugin...

6.1CVSS6.9AI score0.00734EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/07/04 12:00 a.m.12 views

WordPress plugin Protect WP Admin 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabilit...

6.1CVSS7.1AI score0.00734EPSS
SaveExploits1References3
CNVD
CNVD
added 2023/06/28 12:00 a.m.68 views

IBM Spectrum Protect Backup-Archive Client Access Control Error Vulnerability

IBM Spectrum Protect Backup-Archive Client is a set of client programs for IBM Spectrum Protect file backup, archiving from International Business Machines IBM. An Access Control Error vulnerability exists in IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2, which stems from...

8.4CVSS6.7AI score0.00161EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/26 8:07 p.m.40 views

Security Bulletin: A vulnerability in the IBM Spectrum Protect Backup-Archive Client on Microsoft Windows Workstation operating systems can lead to local user escalated privileges (CVE-2023-28956)

Summary A vulnerability in the IBM Spectrum Protect Backup-Archive Client on Microsoft Windows workstation operating systems Microsoft Windows 8.1, 10, and 11 may allow a local user to escalate their privileges due to improper access controls. This problem does not affect Microsoft Windows server...

8.4CVSS7.6AI score0.00161EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/22 6:36 p.m.28 views

Security Bulletin: IBM Storage Protect Operations Center is vulnerable to denial of service due to IBM WebSphere Application Server Liberty (CVE-2023-24998 )

Summary IBM WebSphere Application Server Liberty is used by IBM Storage Protect Operations Center and may be affected by this vulnerability. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the...

7.5CVSS7.6AI score0.48788EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/22 6:34 p.m.34 views

Security Bulletin: IBM Storage Protect Server is vulnerable to attacks due to Golang Go (CVE-2023-24532)

Summary Golang Go is used by IBM Storage Protect Server and may be affected by this vulnerability. Vulnerability Details CVEID:CVE-2023-24532 DESCRIPTION: An unspecified error with return an incorrect result in the ScalarMult and ScalarBaseMult methods of the P256 Curve in Golang Go has an unknow...

5.3CVSS7.1AI score0.00817EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/22 6:30 p.m.25 views

Security Bulletin: IBM Storage Protect Server is vulnerable to denial of service due to Java SE (CVE-2022-21426)

Summary Java SE is used by the IBM Storage Protect Server and may be affected by this vulnerability. Vulnerability Details CVEID:CVE-2022-21426 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated attacker to cause a denial of service...

5.3CVSS5.9AI score0.03117EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/22 6:28 p.m.67 views

Security Bulletin: IBM Storage Protect Server is vulnerable to denial of service due to FasterXML jackson-databind (CVE-2022-42004, CVE-2022-42003)

Summary FasterXML jackson-databind is used by IBM Storage Protect Server and may be affected by this vulnerability. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service, caused by a lack of a check in in the...

7.5CVSS7.4AI score0.02779EPSS
SaveExploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/06/22 6:25 p.m.23 views

Security Bulletin: IBM Storage Protect Server is vulnerable to denial of service due to Java SE (CVE-2023-21830, CVE-2023-21843)

Summary Java SE is used by IBM Storage Protect Server and may be affected by this vulnerability. Vulnerability Details CVEID:CVE-2023-21830 DESCRIPTION: An unspecified vulnerability in Java SE related to the Serialization component could allow a remote attacker to cause a denial of service...

5.3CVSS5.2AI score0.01369EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder