Lucene search
+L

3714 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•4 views

CVE-2025-23932: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Marko-M Quick Count quick-count allows Object Injection.This issue affects Quick Count: from n/a through = 3.00...

9.8CVSS5.8AI score0.00731EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•6 views

PT-2025-5211

Name of the Vulnerable Software and Affected Versions NotFound Quick Count versions n/a through 3.00 Description The issue is related to the deserialization of untrusted data, allowing object injection in NotFound Quick Count. Recommendations For versions n/a through 3.00, update to a version tha...

9.8CVSS0.00731EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•24 views

WordPress plugin Quick Count 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.8CVSS8.4AI score0.00731EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/01/16 6:43 p.m.•20 views

WordPress Quick Count Plugin <= 3.00 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Quick Count versions = 3.00...

9.8CVSS7.3AI score0.00731EPSS
SaveExploits0Affected Software1
Microsoft KB
Microsoft KB
•added 2025/01/14 4:00 p.m.•43 views

Description of the security update for SharePoint Server Subscription Edition: January 14, 2025 (KB5002676)

None None...

7.8CVSS6.8AI score0.01807EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/01/14 10:48 a.m.•20 views

libreswan: Invalid IKEv1 Quick Mode ID causes restart

A NULL pointer dereference flaw was found in Libreswan when processing IKEv1 Quick Mode requests. When an IKEv1 Quick Mode connection configured with IDIPV4ADDR or IDIPV6ADDR receives an IDcr payload with IDFQDN, it triggers a NULL pointer dereference error. This flaw allows a malicious client or...

6.5CVSS5.7AI score0.00813EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/01/02 8:02 p.m.•18 views

libreswan: Invalid IKEv1 Quick Mode ID causes restart

A NULL pointer dereference flaw was found in Libreswan when processing IKEv1 Quick Mode requests. When an IKEv1 Quick Mode connection configured with IDIPV4ADDR or IDIPV6ADDR receives an IDcr payload with IDFQDN, it triggers a NULL pointer dereference error. This flaw allows a malicious client or...

6.5CVSS5.7AI score0.00813EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/01/02 6:44 p.m.•15 views

libreswan: Invalid IKEv1 Quick Mode ID causes restart

A NULL pointer dereference flaw was found in Libreswan when processing IKEv1 Quick Mode requests. When an IKEv1 Quick Mode connection configured with IDIPV4ADDR or IDIPV6ADDR receives an IDcr payload with IDFQDN, it triggers a NULL pointer dereference error. This flaw allows a malicious client or...

6.5CVSS5.7AI score0.00813EPSS
SaveExploits0References6
NVD
NVD
•added 2024/12/13 3:15 p.m.•24 views

CVE-2024-54344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Quick Shop wp-quick-shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through = 1.3.1...

7.1CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:25 p.m.•63 views

CVE-2024-54344

CVE-2024-54344 is a Reflected XSS vulnerability in the WordPress plugin WP Quick Shop (Fahad Mahmood) that affects WP Quick Shop versions from 0 through 1.3.1. Connected sources confirm a cross-site scripting flaw that can be triggered via a reflected input during web page generation. The Wordfen...

7.1CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:25 p.m.•32 views

CVE-2024-54344 WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Quick Shop wp-quick-shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through = 1.3.1...

7.1CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:25 p.m.•8 views

CVE-2024-54344 WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Quick Shop wp-quick-shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through = 1.3.1...

7.1CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•16 views

PT-2024-36229 · Fahad Mahmood · Wp Quick Shop

Name of the Vulnerable Software and Affected Versions: WP Quick Shop versions through 1.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. A Cross-site Scripting XSS vulnerability...

7.1CVSS6.2AI score0.00354EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•15 views

WordPress plugin WP Quick Shop 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•4 views

CVE-2024-54344: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Quick Shop wp-quick-shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through = 1.3.1...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/11 9:47 p.m.•13 views

WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin WP Quick Shop versions = 1.3.1...

7.1CVSS6.1AI score0.00354EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/12/09 1:15 p.m.•24 views

CVE-2023-31214

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through 2.0...

5.4CVSS0.00346EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/12/09 1:15 p.m.•43 views

CVE-2023-31214

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through = 2.0...

5.4CVSS5.8AI score0.00346EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/09 1:15 p.m.•26 views

CVE-2023-25714

Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 5.7.25...

7.5CVSS0.00764EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•30 views

CVE-2023-23975

Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Event Manager: from n/a through 9.7.4...

5.3CVSS0.00658EPSS
SaveExploits0References1
Rows per page
Query Builder