Lucene search
+L

2238 matches found

CVE
CVE
added 2025/05/15 8:09 p.m.76 views

CVE-2023-7195

The WP-Reply Notify WordPress plugin through 1.1 does not have a CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack...

9.3AI score0.00199EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2025/05/15 8:09 p.m.68 views

CVE-2023-7168

CVE-2023-7168 affects the WordPress plugin Better Follow Button for Jetpack (

4.8CVSS7.8AI score0.00299EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2025/05/15 8:09 p.m.53 views

CVE-2023-7086

The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

9.2AI score0.00293EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2025/05/15 8:09 p.m.105 views

CVE-2023-6786

The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the apiurl parameter before redirecting the user to its value, leading to an Open Redirect issue...

6.5AI score0.00509EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2025/05/15 8:09 p.m.58 views

CVE-2023-5934

CVE-2023-5934 affects the Travelpayouts WordPress plugin: versions prior to 1.1.13 lack CSRF protection when importing v1 settings, enabling a CSRF attack to modify settings by a logged-in admin. Documented PoC/exploitation paths exist (e.g., WPScan/patchstack references). Vulnerability context s...

7.3CVSS6.4AI score0.00241EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2025/05/15 8:09 p.m.71 views

CVE-2023-5932

The CVE-2023-5932 issue concerns the WordPress plugin Travelpayouts: All Travel Brands in One Place, affected in versions prior to 1.1.14. The root cause is that a parameter is not properly sanitized/escaped before being echoed back in the page, enabling a Reflected Cross-Site Scripting (XSS) att...

4.8CVSS5.8AI score0.00373EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2025/05/15 8:08 p.m.88 views

CVE-2023-5529

Affected software: Advanced Page Visit Counter WordPress plugin, prior to version 8.0.6. Root cause: plugin does not sanitise/escape certain settings, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (e.g., multisite). Impact: admin-level Stored X...

4.8CVSS5.4AI score0.00373EPSS
SaveExploits2References1Affected Software1
attackerkb
attackerkb
added 2025/05/14 12:30 a.m.7 views

CVE-2025-47915

reserved but not needed...

5.4AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/05/09 4:54 a.m.9 views

SUSE CVE-2022-49880

In the Linux kernel, the following vulnerability has been resolved: ext4: fix warning in 'ext4dareleasespace' Syzkaller report issue as follows: EXT4-fs loop0: Free/Dirty block details EXT4-fs loop0: freeblocks=0 EXT4-fs loop0: dirtyblocks=0 EXT4-fs loop0: Block reservation details EXT4-fs loop0:...

4.4CVSS6.4AI score0.00212EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
added 2025/05/06 3:07 a.m.9 views

SUSE CVE-2022-49851

In the Linux kernel, the following vulnerability has been resolved: riscv: fix reserved memory setup Currently, RISC-V sets up reserved memory using the "early" copy of the device tree. As a result, when trying to get a reserved memory region using ofreservedmemlookup, the pointer to reserved...

7.1CVSS6.4AI score0.00198EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/03 12:15 p.m.9 views

UBUNTU-CVE-2025-37799

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3processxdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 that is, packet sizes between 128 - 3k bytes. We noticed MTU-related connectivity issues with Cilium's...

8.6CVSS6.2AI score0.00343EPSS
SaveExploits0References25
OSV
OSV
added 2025/05/02 4:15 p.m.23 views

UBUNTU-CVE-2023-53109

In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev-neededheadroom IP tunnels can apparently update dev-neededheadroom in their xmit path. This patch takes care of three tunnels xmit, and also the core LLRESERVEDSPACE and...

5.5CVSS6.1AI score0.00194EPSS
SaveExploits0References11
OSV
OSV
added 2025/05/01 3:16 p.m.6 views

DEBIAN-CVE-2022-49880

In the Linux kernel, the following vulnerability has been resolved: ext4: fix warning in 'ext4dareleasespace' Syzkaller report issue as follows: EXT4-fs loop0: Free/Dirty block details EXT4-fs loop0: freeblocks=0 EXT4-fs loop0: dirtyblocks=0 EXT4-fs loop0: Block reservation details EXT4-fs loop0:...

5.5CVSS5.5AI score0.00212EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/01 3:16 p.m.4 views

DEBIAN-CVE-2022-49851

In the Linux kernel, the following vulnerability has been resolved: riscv: fix reserved memory setup Currently, RISC-V sets up reserved memory using the "early" copy of the device tree. As a result, when trying to get a reserved memory region using ofreservedmemlookup, the pointer to reserved...

7.1CVSS5.5AI score0.00198EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/01 3:16 p.m.14 views

CVE-2022-49851

In the Linux kernel, the following vulnerability has been resolved: riscv: fix reserved memory setup Currently, RISC-V sets up reserved memory using the "early" copy of the device tree. As a result, when trying to get a reserved memory region using ofreservedmemlookup, the pointer to reserved...

7.1CVSS0.00198EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/01 3:16 p.m.23 views

UBUNTU-CVE-2022-49851

In the Linux kernel, the following vulnerability has been resolved: riscv: fix reserved memory setup Currently, RISC-V sets up reserved memory using the "early" copy of the device tree. As a result, when trying to get a reserved memory region using ofreservedmemlookup, the pointer to reserved...

7.1CVSS5.8AI score0.00198EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/05/01 2:10 p.m.4 views

CVE-2022-49880 ext4: fix warning in 'ext4_da_release_space'

In the Linux kernel, the following vulnerability has been resolved: ext4: fix warning in 'ext4dareleasespace' Syzkaller report issue as follows: EXT4-fs loop0: Free/Dirty block details EXT4-fs loop0: freeblocks=0 EXT4-fs loop0: dirtyblocks=0 EXT4-fs loop0: Block reservation details EXT4-fs loop0:...

6AI score0.00212EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/05/01 2:10 p.m.29 views

CVE-2022-49851 riscv: fix reserved memory setup

In the Linux kernel, the following vulnerability has been resolved: riscv: fix reserved memory setup Currently, RISC-V sets up reserved memory using the "early" copy of the device tree. As a result, when trying to get a reserved memory region using ofreservedmemlookup, the pointer to reserved...

0.00198EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/01 2:10 p.m.11 views

CVE-2022-49851 riscv: fix reserved memory setup

In the Linux kernel, the following vulnerability has been resolved: riscv: fix reserved memory setup Currently, RISC-V sets up reserved memory using the "early" copy of the device tree. As a result, when trying to get a reserved memory region using ofreservedmemlookup, the pointer to reserved...

5AI score
SaveExploits0References7
CVE
CVE
added 2025/05/01 2:10 p.m.78 views

CVE-2022-49851

CVE-2022-49851 — Linux kernel (RISC-V) reserved memory setup Vulnerability context: The issue arises in how RISC-V sets up reserved memory using the early device-tree copy. The pointer to reserved memory regions can be an early, pre-virtual-memory address when accessed via of_reserved_mem_lookup(...

7.1CVSS6.3AI score0.00198EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder