Lucene search
+L

1552 matches found

Openbugbounty
Openbugbounty
added 2023/12/05 2:46 p.m.7 views

short-story.net Cross Site Scripting vulnerability OBB-3803444

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
added 2023/12/05 12:00 a.m.11 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets, which is caused by a memory corruption in the wireless interface layer when sending an SMS or writing an SMS to a SIM...

7.8CVSS7.7AI score0.0014EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/11/28 7:15 a.m.4 views

CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS...

6.8CVSS7.2AI score0.01297EPSS
SaveExploits1References3
NVD
NVD
added 2023/11/28 7:15 a.m.53 views

CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS...

6.8CVSS0.01297EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/28 7:15 a.m.6 views

UBUNTU-CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS...

6.8CVSS6.7AI score0.01297EPSS
SaveExploits1References11
WPVulnDB
WPVulnDB
added 2023/11/23 12:00 a.m.19 views

Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions

Description The Short URL plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 1.6.8. This makes it possible for authenticated attackers such as...

6.7AI score0.0035EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/22 12:00 a.m.13 views

WordPress Plugin Popup with fancybox Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS9.1AI score0.0078EPSS
SaveExploits0References4
NVD
NVD
added 2023/11/06 8:15 a.m.31 views

CVE-2022-46860

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in KaizenCoders Short URL allows SQL Injection.This issue affects Short URL: from n/a through 1.6.4...

9.8CVSS9.8AI score0.00685EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/06 8:15 a.m.8 views

CVE-2022-46860

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in KaizenCoders Short URL allows SQL Injection.This issue affects Short URL: from n/a through 1.6.4...

9.8CVSS5.8AI score0.00685EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/06 8:15 a.m.26 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in KaizenCoders Short URL allows SQL Injection.This issue affects Short URL: from n/a through 1.6.4...

7.5CVSS7.8AI score0.00685EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/06 7:53 a.m.53 views

CVE-2022-46860

CVE-2022-46860 affects the WordPress plugin Short URL (KaizenCoders) up to version 1.6.4 . The issue is an SQL Injection caused by improper neutralization of input, enabling unauthenticated/subscriber-exploited database access under the vulnerability path “Short URL”

9.8CVSS8.9AI score0.00685EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/06 12:00 a.m.15 views

PT-2023-15085 · Unknown · Kaizencoders Short Url

Name of the Vulnerable Software and Affected Versions: KaizenCoders Short URL versions 1.6.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS9.5AI score0.00685EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/06 12:00 a.m.11 views

WordPress Plugin Short URL SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

9.8CVSS7.7AI score0.00685EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/11/05 12:15 a.m.6 views

CVE-2023-47249

In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function for unsigned short in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read...

6.5CVSS5.8AI score0.00521EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/05 12:15 a.m.25 views

CVE-2023-47249

In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function for unsigned short in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read...

6.5CVSS6.5AI score0.00521EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/05 12:15 a.m.10 views

CVE-2023-47249

In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function for unsigned short in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read...

6.5CVSS5.8AI score0.00521EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/11/04 12:00 a.m.14 views

PT-2023-30390 · International Color Consortium · Demoiccmax

Name of the Vulnerable Software and Affected Versions: International Color Consortium DemoIccMAX version 79ecb74 Description: The issue is related to an out-of-bounds read in the CIccXmlArrayType::ParseText function for unsigned short in IccUtilXml.cpp within libIccXML.a. Recommendations: For...

6.5CVSS6.2AI score0.00521EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2023/11/03 12:00 a.m.14 views

WordPress Short URL Plugin <= 1.6.8 is vulnerable to Broken Access Control

Software Short URL Type Plugin Vulnerable versions = 1.6.8 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47225 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 80acb0670d7b Credits Abdi Pranata Required privilege...

6.5AI score0.0035EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/10/12 1:15 p.m.8 views

CVE-2023-45058

Cross-Site Request Forgery CSRF vulnerability in KaizenCoders Short URL plugin = 1.6.8 versions...

8.8CVSS7.3AI score0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/12 1:15 p.m.30 views

CVE-2023-45058

Cross-Site Request Forgery CSRF vulnerability in KaizenCoders Short URL plugin = 1.6.8 versions...

8.8CVSS5.8AI score0.0021EPSS
SaveExploits0References1
Rows per page
Query Builder