Lucene search
+L

3955 matches found

Positive Technologies
Positive Technologies
added 2022/10/27 12:00 a.m.6 views

PT-2022-26699 · Unknown · Train Scheduler App

Name of the Vulnerable Software and Affected Versions: Train Scheduler App version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Train Code, Train Name, and Destination text fields. This enables the execution of...

5.4CVSS6AI score0.00452EPSS
SaveExploits1References5
CVE
CVE
added 2022/10/25 12:00 a.m.73 views

CVE-2022-3247

The WordPress Blog2Social: Social Media Auto Post & Scheduler plugin prior to version 6.9.10 is vulnerable to SSRF due to missing authorization in an AJAX action and failure to ensure the target URL is external. This allows any authenticated user (e.g., subscribers) to trigger SSRF. Remediation: ...

6.5CVSS6.3AI score0.00667EPSS
SaveExploits2References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/10/21 12:00 a.m.37 views

Linux Kernel Net Scheduler Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.1CVSS6.5AI score0.00463EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/10/19 2:06 p.m.50 views

Security Bulletin: Apache log4j security vulnerability as it relates to IBM Maximo Scheduler Optimization - Apache Log4j - [CVE-2021-45105] (affecting v2.16) and [CVE-2021-45046] (affecting v2.15)

Summary For the 8.0.0 version of MSO, which is distributed as part of the MAS catalog here are the instructions to move to the 8.0.3 version to get log4j 2.17.1 Apache Log4j - CVE-2021-45105 affecting v2.16 and CVE-2021-45046 affecting v2.15 Vulnerability Details CVEID:CVE-2021-45105 DESCRIPTION:...

10CVSS9.6AI score0.99999EPSS
SaveExploits365Affected Software1
RedHat Linux
RedHat Linux
added 2022/10/18 8:06 a.m.8 views

kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation

A use-after-free flaw was found in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem...

7.8CVSS6.6AI score0.05871EPSS
SaveExploits7References5
RedHat Linux
RedHat Linux
added 2022/10/11 12:36 p.m.14 views

kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation

A use-after-free flaw was found in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem...

7.8CVSS6.6AI score0.05871EPSS
SaveExploits7References5
RedHat Linux
RedHat Linux
added 2022/10/11 12:35 p.m.9 views

kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation

A use-after-free flaw was found in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem...

7.8CVSS6.6AI score0.05871EPSS
SaveExploits7References5
OSV
OSV
added 2022/10/09 10:41 p.m.11 views

GSD-2022-1006469 net: sched: fix possible refcount leak in tc_new_tfilter()

net: sched: fix possible refcount leak in tcnewtfilter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2022/09/28 12:00 a.m.36 views

WordPress Backup Scheduler Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS8.7AI score0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/27 12:00 a.m.14 views

PT-2025-18546

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the drm/scheduler. The issue involved leaking dependency fences when processes were being killed, and a reference to the...

7.8CVSS6.5AI score0.00276EPSS
SaveExploits0References434
BDU FSTEC
BDU FSTEC
added 2022/09/26 12:00 a.m.14 views

The vulnerability of the scheduler daemon in UNIX-like operating systems, Cron, related to pointer arithmetic errors, allows a malicious actor to trigger a service failure.

The vulnerability of the Cron task scheduler in UNIX-like operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a perpetrator to cause service failures...

5.5CVSS5.7AI score0.0035EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2022/09/23 7:15 p.m.8 views

CVE-2022-38079

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

8.8CVSS5.8AI score0.00375EPSS
SaveExploits0References2
NVD
NVD
added 2022/09/23 7:15 p.m.23 views

CVE-2022-38079

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

8.8CVSS0.00375EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/23 7:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

6.8CVSS8.8AI score0.00375EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/23 6:35 p.m.31 views

CVE-2022-38079 WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

5.4CVSS9AI score0.00375EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/09/23 6:35 p.m.7 views

CVE-2022-38079 WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

5.4CVSS6.5AI score0.00375EPSS
SaveExploits0References2
CVE
CVE
added 2022/09/23 6:35 p.m.111 views

CVE-2022-38079

CVE-2022-38079 concerns a Cross-Site Request Forgery (CSRF) in the WordPress Backup Scheduler plugin, versioned

8.8CVSS7.1AI score0.00375EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/09/23 12:00 a.m.12 views

WordPress plugin Backup Scheduler 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.7AI score0.00375EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2022/09/23 12:00 a.m.12 views

Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery

The plugin does not have CSRF check in some places, which could allow attackers to make logged in users perform unwanted actions...

8.8CVSS4.3AI score0.00375EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/09/23 12:00 a.m.41 views

WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Lana Codes in WordPress Backup Scheduler plugin versions = 1.5.13. Solution Deactivate and delete. This plugin has been closed as of September 19, 2022 and is not available for download. This closure is temporary, pending a full review...

8.8CVSS3AI score0.00375EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder