54562 matches found
CVE-2023-27524
CVE-2023-27524 CVE-2023-27524...
CVE-2019-0708
CVE-2019-0708...
CVE-2022-0847
CVE-2022-0847 CVE-2022-0847...
CVE-2020-14364
CVE-2020-14364...
cve-2017-5638
cve-2017-5638...
CVE-2024-38475
This repository does not have a README...
CVE-2019-2725
CVE-2019-2725...
cve-2015-5477
cve-2015-5477...
CVE-2023-51385
CVE-2023-51385...
CVE-2021-21985
CVE-2021-21985...
CVE-2008-1613
CVE-2008-1613...
codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1
Plexus-archiver The current master is now at https://github.com/codehaus-plexus/plexus-archiver Important Hint Based on a hint of snyk.io security team they have found a possible security issue. Furthermore they have offered an patch to prevent the possible security issue. This patch has been...
cargo-fuzz
cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly compiler since it us...
CVE-2019-0539
CVE-2019-0539...
eyoucms v.1.6.5 - Cross-Site Scripting
Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL. id: CVE-2024-22927 info: name: eyoucms v.1.6.5 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS...
Mage AI - Insecure Default Authentication Setup
A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...
Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection
The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 Free and = 2.27.4 Premium due to insufficient escaping on the user supplied parameter and lack of sufficient...
GiveWP - PHP Object Injection
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...
Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover
The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...