Lucene search
+L

321 matches found

CVE
CVE
•added 2025/04/04 3:59 p.m.•46 views

CVE-2025-32263

Technical details (affected versions beyond 3.6.2, root cause, exploit info, remediation) are not provided in the supplied documents; monitoring is advised.

4.3CVSS7.2AI score0.00163EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•5 views

CVE-2025-32263 WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

4.3CVSS7.2AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•12 views

WordPress plugin Sequential Order Numbers for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6AI score0.00163EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•3 views

CVE-2025-32263: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site Request Forgery.This issue affects Sequential Order Numbers for WooCommerce: from n/a through = 3.6.2...

4.3CVSS5.8AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/28 10:12 p.m.•52 views

GHSA-5VMP-M5V2-HX47 tough root metadata version is not checked for sequential versioning

Summary When updating the root role, a TUF client must establish a trusted line of continuity to the latest set of keys. While sequentially downloading new versions of the root metadata file, tough will not check that the root object version it received was the next sequential version from the...

5.7CVSS6.2AI score0.00326EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
•added 2025/03/13 7:00 a.m.•9 views

pinmux: Use sequential access to access desc->pinmux data

...

5.5CVSS7.2AI score0.00174EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/28 5:33 a.m.•18 views

CVE-2022-49706

In the Linux kernel, the following vulnerability has been resolved: zonefs: fix zonefsiomapbegin for reads If a readahead is issued to a sequential zone file with an offset exactly equal to the current file size, the iomap type is set to IOMAPUNWRITTEN, which will prevent an IO, but the iomap...

5.5CVSS6.8AI score0.00268EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•14 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from xascreaterange incorrectly handling multiple sequential entries when they exist...

4.7CVSS5.3AI score0.00199EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/01/13 1:52 p.m.•20 views

CVE-2024-47141

In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc-pinmux data When two client of the same gpio call pinctrlselectstate for the same functionality, we are seeing NULL pointer issue while accessing desc-muxowner. Let's say two processes...

4.7CVSS6.8AI score0.00174EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a sequential problem with qlen adjustments in the network scheduler...

5.5CVSS6.5AI score0.00263EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2024/12/10 6:03 p.m.•11 views

Security update for avahi

This update for avahi fixes the following issues: CVE-2024-52616: sequential increment of DNS transaction IDs allows DNS spoofing. bsc1233420 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you c...

6.3CVSS7.3AI score0.00666EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•20 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from sequential allocation and access of entries in the SMEM partition, which may result in memory corruption if not managed properly...

8.4CVSS6.7AI score0.00104EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/11/27 4:04 a.m.•10 views

SUSE CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.7CVSS6.6AI score0.00506EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2024/11/26 3:15 p.m.•70 views

CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS7AI score0.00506EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/26 3:15 p.m.•25 views

CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS6.6AI score
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/11/26 2:11 p.m.•52 views

CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS4.5AI score0.00506EPSS
SaveExploits0
CVE
CVE
•added 2024/11/26 2:11 p.m.•153 views

CVE-2024-22117

CVE-2024-22117 describes a bug in the map element URL handling where the system increments sysmapelementurlid and a manual change (sysmapelementurlid + 1) can prevent others from adding URLs. Public advisories (NVD entry and OSV listings) reference the same issue, with vendor advisories noting th...

2.2CVSS3.4AI score0.00506EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/26 2:11 p.m.•20 views

CVE-2024-22117 Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS6.8AI score0.00506EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/21 11:53 a.m.•118 views

CVE-2024-47680

CVE-2024-47680 affects the Linux kernel’s f2fs discard handling for conventional zones on zoned block devices. The root cause is that f2fs relied on a discard capability check performed by bdev_max_discard_sectors() and bdev_is_zoned(), which bypasses to discard even when a device doesn’t support...

5.5CVSS6.1AI score0.00232EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/10/02 5:00 a.m.•34 views

CVE-2024-21530

Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, wrap, and dump functions are sequentially called. An attacker can generate the same ciphertext by creating a new encrypted message with the same cocoon object. Note: The issue...

4.5CVSS0.0014EPSS
SaveExploits0References5
Rows per page
Query Builder