Lucene search
+L

1912 matches found

Cvelist
Cvelist
added 2024/08/13 4:53 p.m.35 views

CVE-2023-31304

Improper input validation in SMU may allow an attacker with privileges and a compromised physical function PF to modify the PCIe® lane count and speed, potentially leading to a loss of availability...

2.3CVSS0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/13 12:0 a.m.8 views

PT-2024-12268 · Smu · Smu

Name of the Vulnerable Software and Affected Versions: SMU affected versions not specified Description: The issue is related to improper input validation in SMU, which may allow an attacker with privileges and a compromised physical function PF to modify the PCIe lane count and speed. This could...

2.3CVSS6.5AI score0.00151EPSS
SaveExploits0References7
OSV
OSV
added 2024/08/12 9:15 p.m.4 views

DEBIAN-CVE-2024-43359

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.1CVSS4.9AI score0.00398EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/08/12 9:15 p.m.20 views

CVE-2024-43359

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.1CVSS5.8AI score0.00398EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/12 9:15 p.m.18 views

UBUNTU-CVE-2024-43359

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.1CVSS5.7AI score0.00398EPSS
SaveExploits0References5
CVE
CVE
added 2024/08/12 8:49 p.m.68 views

CVE-2024-43359

CVE-2024-43359 affects ZoneMinder. Multiple connected sources confirm a cross-site scripting vulnerability in the montagereview feature that is exploitable via the displayinterval, speed, and scale parameters. The issue is fixed in ZoneMinder releases 1.36.34 and 1.37.61. The available documents ...

6.1CVSS3.6AI score0.00398EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/12 8:49 p.m.12 views

CVE-2024-43359 XSS vulnerabilities in montagereview

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.4AI score0.00398EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/30 12:0 a.m.11 views

PT-2024-32723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero error can occur in the hisi calc effective speed function if the value of max speed hz is 0. The max speed hz value is provided by firmware, which is generally...

5.5CVSS5.6AI score0.00206EPSS
SaveExploits0
NVD
NVD
added 2024/07/24 7:15 a.m.33 views

CVE-2024-6553

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to...

5.3CVSS0.00373EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/24 6:42 a.m.46 views

CVE-2024-6553

Summary of CVE-2024-6553 : The WP Meteor Website Speed Optimization Addon for WordPress is vulnerable to Full Path Disclosure in all versions up to and including 3.4.3. Root cause: the plugin uses wpdesk and leaves test files with display_errors enabled, allowing unauthenticated access to the web...

5.3CVSS5.1AI score0.00373EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/07/24 2:39 a.m.6 views

WordPress WP Meteor Website Speed Optimization Addon plugin <= 3.4.3 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin WP Meteor Page Speed Optimization Topping versions = 3.4.3...

5.3CVSS6.7AI score0.00373EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/07/24 12:0 a.m.14 views

WordPress WP Meteor Page Speed Optimization Topping Plugin <= 3.4.3 is vulnerable to Sensitive Data Exposure

Software WP Meteor Page Speed Optimization Topping Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.4.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6553 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 1299014de04b Credits...

5.3CVSS6.6AI score0.00373EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2024/07/18 3:5 a.m.5 views

SUSE CVE-2022-48850

In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. 755.549084 mlx5core...

4.4CVSS6.2AI score0.00211EPSS
SaveExploits0References9
OSV
OSV
added 2024/07/16 1:15 p.m.3 views

DEBIAN-CVE-2022-48850

In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. 755.549084 mlx5core...

5.5CVSS5.6AI score0.00211EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/07/15 2:39 a.m.6 views

WordPress Index WP MySQL For Speed plugin < 1.4.18 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Guido Iván García Duva in WordPress Plugin Index WP MySQL For Speed versions 1.4.18...

6.8CVSS6.3AI score0.00499EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2024/07/15 12:0 a.m.13 views

WordPress Index WP MySQL For Speed Plugin < 1.4.18 is vulnerable to Cross Site Scripting (XSS)

Software Index WP MySQL For Speed Type Plugin Vulnerable versions 1.4.18 Fixed in 1.4.18 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4977 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID de00e035d3ae Credits Guido Ivá...

6.8CVSS5.7AI score0.00499EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2024/07/13 6:0 a.m.55 views

CVE-2024-4977

The vulnerability CVE-2024-4977 affects the Index WP MySQL For Speed WordPress plugin, where versions prior to 1.4.18 do not sanitize or escape a parameter before outputting it, enabling a Reflected XSS against high-privilege users (e.g., admins). Patch: fixed in version 1.4.18. This CVE has corr...

6.8CVSS6.4AI score0.00499EPSS
SaveExploits1References1Affected Software1
Citrix
Citrix
added 2024/07/13 12:0 a.m.7 views

How to Modify Network Speed and Duplexing

This article describes how to change speed, duplex, and auto-negotiation on a network interface in XenServer. Requirements Console access required, if reconfiguring the management interface...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2024/07/13 12:0 a.m.4 views

WordPress plugin Index WP MySQL For Speed Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.8CVSS6.1AI score0.00499EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2024/07/09 7:46 a.m.6 views

WordPress WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials vulnerability

Improper Authorization due to use of Hardcoded Credentials vulnerability discovered by Lucio Sá in WordPress Plugin WP2Speed Faster versions = 1.0.1...

5.3CVSS7AI score0.00444EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder