Lucene search
+L

14045 matches found

NVD
NVD
added 2024/04/29 10:15 a.m.31 views

CVE-2024-33593

Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91...

4.3CVSS4.7AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/29 10:15 a.m.8 views

CVE-2024-33593

Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91...

4.3CVSS5.8AI score0.0034EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/29 10:09 a.m.21 views

CVE-2024-33593 WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability

Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91...

4.3CVSS6.9AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/29 10:09 a.m.42 views

CVE-2024-33593 WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability

Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91...

4.3CVSS5AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/29 10:09 a.m.79 views

CVE-2024-33593

CVE-2024-33593: Missing Authorization vulnerability in RedNao Smart Forms affecting Smart Forms up to version 2.6.91. Connected Red Hat entry confirms the issue description; no publicly documented exploitation details, impact specifics, or remediation in the provided documents. The known issue is...

4.3CVSS5.1AI score0.0034EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/04/29 6:15 a.m.10 views

CVE-2024-1905

The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS5.8AI score0.0047EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/04/29 6:00 a.m.36 views

CVE-2024-1905 Smart Forms < 2.6.96 - Admin+ Stored XSS

The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.5AI score0.0047EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/04/29 6:00 a.m.12 views

CVE-2024-1905 Smart Forms < 2.6.96 - Admin+ Stored XSS

The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.6AI score0.0047EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2024/04/29 12:00 a.m.15 views

Tuya Smart Camera U6n 安全漏洞

Tuya Smart Camera U6n is a smart camera from Tuya China. A security vulnerability exists in Tuya Smart camera U6N version v.3.2.5. An attacker exploited the vulnerability to cause a denial of service via specially crafted packets to the network connectivity component...

3.3CVSS6.6AI score0.00205EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/29 12:00 a.m.19 views

PT-2024-25362 · Rednao · Rednao Smart Forms

Name of the Vulnerable Software and Affected Versions: RedNao Smart Forms versions 2.6.91 and earlier Description: The issue is related to a Missing Authorization vulnerability in RedNao Smart Forms. Recommendations: For RedNao Smart Forms versions 2.6.91 and earlier, at the moment, there is no...

4.3CVSS5.9AI score0.0034EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/04/29 12:00 a.m.18 views

PT-2024-24476 · Tuya · Tuya Smart Camera U6N

Name of the Vulnerable Software and Affected Versions: Tuya Smart camera U6N version 3.2.5 Description: An issue in the Tuya Smart camera U6N allows a remote attacker to cause a denial of service via a crafted packet to the network connection component. Recommendations: For Tuya Smart camera U6N...

3.3CVSS7.2AI score0.00205EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/04/29 12:00 a.m.31 views

CVE-2024-32268

An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connection component...

6.7AI score0.00205EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/29 12:00 a.m.14 views

WordPress plugin Smart Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.7AI score0.0034EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/29 12:00 a.m.83 views

CVE-2024-32268

CVE-2024-32268 describes a vulnerability in Tuya Smart camera U6N v3.2.5 where a remote attacker can cause a denial of service by sending a crafted packet to the network connection component. Affected product: Tuya Smart camera U6N (version 3.2.5). Current documents do not provide concrete exploi...

3.3CVSS6.8AI score0.00205EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/29 12:00 a.m.8 views

WordPress plugin Smart Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.1AI score0.0047EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2024/04/29 12:00 a.m.26 views

CVE-2024-32268

An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connection component...

6.8AI score0.00205EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/29 12:00 a.m.15 views

WordPress Smart Forms Plugin < 2.6.96 is vulnerable to Cross Site Scripting (XSS)

Software Smart Forms Type Plugin Vulnerable versions 2.6.96 Fixed in 2.6.96 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1905 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f2ffffc8c85a Credits Bob Matyas Required privileg...

5.7AI score0.0047EPSS
SaveExploits2References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/28 12:00 a.m.11 views

PT-2024-18411 · WordPress · Smart Forms

Name of the Vulnerable Software and Affected Versions: The Smart Forms WordPress plugin versions prior to 2.6.96 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised an...

5.9CVSS5.3AI score0.0047EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:00 a.m.34 views

RHEL 8 : OpenShift Container Platform 4.10.61 (RHSA-2023:3362)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3362 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

7.5CVSS6.6AI score0.01119EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:00 a.m.38 views

RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3610)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3610 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

9.8CVSS7AI score0.04561EPSS
SaveExploits4References29
Rows per page
Query Builder