Lucene search
+L

12366 matches found

Patchstack
Patchstack
added 2022/07/07 12:00 a.m.29 views

WordPress Simple Membership plugin <= 4.1.2 - Membership Privilege Escalation vulnerability

Membership Privilege Escalation vulnerability discovered by Jet Infosystems in WordPress Simple Membership plugin versions = 4.1.2. Solution Update the WordPress Simple Membership plugin to the latest available version at least 4.1.3...

8.8CVSS3AI score0.01169EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2022/07/07 12:00 a.m.34 views

WordPress Simple Membership plugin <= 4.1.2 - Unauthenticated Membership Privilege Escalation vulnerability

Unauthenticated Membership Privilege Escalation vulnerability discovered by Jet Infosystems in WordPress Simple Membership plugin versions = 4.1.2. Solution Update the WordPress Simple Membership plugin to the latest available version at least 4.1.3...

9.8CVSS3.2AI score0.01381EPSS
SaveExploits2References1Affected Software1
RedHat Linux
RedHat Linux
added 2022/07/05 2:41 p.m.8 views

Satellite: Allow unintended SCA certificate to authenticate Candlepin

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...

5.5CVSS5.8AI score0.00174EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/07/05 12:00 a.m.5 views

PT-2022-11396 · Red Hat +1 · Red Hat Satellite +1

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite affected versions not specified Description: The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate...

5.5CVSS5.3AI score0.00174EPSS
SaveExploits0References483
Fedora
Fedora
added 2022/07/04 1:35 a.m.23 views

[SECURITY] Fedora 36 Update: golang-k8s-sample-controller-1.22.0-4.fc36

This package implements a simple controller for watching Foo resources as defined with a CustomResourceDefinition CRD...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/04 1:35 a.m.26 views

[SECURITY] Fedora 36 Update: douceur-0.2.0-14.fc36

A simple CSS parser and inliner in Go...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
CNVD
CNVD
added 2022/06/30 12:00 a.m.50 views

WordPress Plugin Simple Ads Manager code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Plugin Simple Ads Manager is vulnerable to code injection, which can be exploited by remote attacke...

9.8CVSS2.3AI score0.00911EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.28 views

Advantech iView SQL注入漏洞

Advantech Iview is a Simple Network Protocol SNMP based software from Advantech, China, for managing B B SmartWorx devices. information...

8.1CVSS5.4AI score0.00848EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.18 views

Advantech iView SQL注入漏洞

Advantech iView is a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China. iView is vulnerable to a SQL injection vulnerability, which is caused by a special element used in SQL commands that is not neutralized and can be exploited to obtain...

4.9CVSS5.9AI score0.0089EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.33 views

Advantech iView 命令注入漏洞

Advantech iView, a Simple Network Protocol SNMP based software from Advantech, China, for managing B B SmartWorx devices, is vulnerable to a command injection vulnerability in versions prior to Advantech iView 5.7.04.6469, which stems from the use of a special element in a command that is not...

9.8CVSS6.2AI score0.59406EPSS
SaveExploits4References7
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.25 views

Advantech iView SQL注入漏洞

Advantech Iview, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in Advantech iView, which stems from a special element used in SQL commands that is not neutralized. An unauthorized attacker...

8.8CVSS5.9AI score0.09243EPSS
SaveExploits0References5
zdt
zdt
added 2022/06/27 12:00 a.m.352 views

WordPress Simple Page Transition 1.4.1 Cross Site Scripting Vulnerability

Exploit Title: WordPress Plugin ‘Simple Page Transition’ - Stored Cross Site Scripting Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/simple-page-transition/ Version: 1.4.1 Tested on: Firefox Contact me: email protected Vulnerable code: " / POC: 1-...

7.4AI score
SaveExploits0
Patchstack
Patchstack
added 2022/06/27 12:00 a.m.31 views

WordPress Simple Post Notes plugin <= 1.7.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Sachin Kumar eSec Forte Technologies Pvt Ltd in WordPress Simple Post Notes plugin versions = 1.7.5. Solution Update the WordPress Simple Post Notes plugin to the latest available version at least 1.7.6...

4.8CVSS1.7AI score0.00565EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2022/06/24 7:15 a.m.7 views

CVE-2017-20095

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...

9.8CVSS5.6AI score0.00911EPSS
SaveExploits1References2
NVD
NVD
added 2022/06/24 7:15 a.m.19 views

CVE-2017-20095

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...

9.8CVSS0.00911EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/24 7:15 a.m.21 views

Code injection

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...

7.5CVSS9.7AI score0.00911EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/24 6:45 a.m.25 views

CVE-2017-20095 Simple Ads Manager Plugin code injection

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...

6.3CVSS9.8AI score0.00911EPSS
SaveExploits1References2
CVE
CVE
added 2022/06/24 6:45 a.m.43 views

CVE-2017-20095

CVE-2017-20095 affects the WordPress plugin Simple Ads Manager . The connected sources describe a remote, network-exploitable vulnerability that leads to code injection due to manipulation of unknown code. Public documentation labels it as critical/high impact (e.g., NVD CVSS v3.1 base score 9.8,...

9.8CVSS8.2AI score0.00911EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/06/24 12:00 a.m.8 views

WordPress Plugin Simple Ads Manager 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Plugin Simple Ads Manager is vulnerable to code injection, which can be exploited by remote attacke...

9.8CVSS5.9AI score0.00911EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/06/23 6:38 p.m.27 views

CVE-2022-32987

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

5.4AI score0.00528EPSS
SaveExploits1References2
Rows per page
Query Builder