Lucene search
K

1430 matches found

Patchstack
Patchstack
added 2025/04/04 1:31 p.m.7 views

WordPress Split Test For Elementor Plugin <= 1.8.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin Split Test For Elementor versions = 1.8.3...

7.6CVSS9AI score0.005EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/04/04 12:0 a.m.3 views

WordPress plugin Split Test For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

5.9CVSS6.1AI score0.01017EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/04 12:0 a.m.1 views

PT-2025-14926 · Elementor · Split Test For Elementor

Name of the Vulnerable Software and Affected Versions: Split Test For Elementor versions 1.8.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can...

5.9CVSS6.2AI score0.01017EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/04/04 12:0 a.m.1 views

PT-2025-14983 · Elementor · Split Test For Elementor

Name of the Vulnerable Software and Affected Versions: Split Test For Elementor versions 1.8.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

7.6CVSS8.2AI score0.005EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/04/04 12:0 a.m.3 views

WordPress plugin Split Test For Elementor SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

7.6CVSS8.3AI score0.005EPSS
Exploits0References1
OSV
OSV
added 2025/04/03 8:15 a.m.0 views

DEBIAN-CVE-2025-22000

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: drop beyond-EOF folios with the right number of refs When an after-split folio is large and needs to be dropped due to EOF, folioputrefsfolio, folionrpagesfolio should be used to drop all page cache refs. Otherwise...

5.5CVSS5.6AI score0.00033EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/02 11:7 p.m.15 views

CVE-2025-31688

Cross-Site Request Forgery CSRF vulnerability in Drupal Configuration Split allows Cross Site Request Forgery.This issue affects Configuration Split: from 0.0.0 before 1.10.0, from 2.0.0 before 2.0.2...

7.3AI score0.003EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/04/01 3:41 p.m.1 views

CVE-2025-21933 arm: pgtable: fix NULL pointer dereference issue

In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When updatemmucacherange is called by updatemmucache, the vmf parameter is NULL, which will cause a NULL pointer dereference issue in adjustpte: Unable to handle kernel NULL pointe...

5.9AI score0.00097EPSS
Exploits0References2
OSV
OSV
added 2025/04/01 3:41 p.m.1 views

CVE-2025-21933 arm: pgtable: fix NULL pointer dereference issue

In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When updatemmucacherange is called by updatemmucache, the vmf parameter is NULL, which will cause a NULL pointer dereference issue in adjustpte: Unable to handle kernel NULL pointe...

5.5CVSS6.2AI score0.00097EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2025/04/01 12:30 a.m.16 views

Drupal Configuration Split Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Drupal Configuration Split allows Cross Site Request Forgery. This issue affects Configuration Split: from 0.0.0 before 1.10.0, from 2.0.0 before 2.0.2...

6.8CVSS7.1AI score0.003EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/04/01 12:30 a.m.13 views

GHSA-QQ45-CQHG-JWX5 Drupal Configuration Split Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Drupal Configuration Split allows Cross Site Request Forgery. This issue affects Configuration Split: from 0.0.0 before 1.10.0, from 2.0.0 before 2.0.2...

6.8CVSS7.1AI score0.003EPSS
Exploits0References3
NVD
NVD
added 2025/03/31 10:15 p.m.9 views

CVE-2025-31688

Cross-Site Request Forgery CSRF vulnerability in Drupal Configuration Split allows Cross Site Request Forgery.This issue affects Configuration Split: from 0.0.0 before 1.10.0, from 2.0.0 before 2.0.2...

6.8CVSS0.003EPSS
Exploits0References1
OSV
OSV
added 2025/03/31 10:15 p.m.1 views

CVE-2025-31688

Cross-Site Request Forgery CSRF vulnerability in Drupal Configuration Split allows Cross Site Request Forgery.This issue affects Configuration Split: from 0.0.0 before 1.10.0, from 2.0.0 before 2.0.2...

6.8CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2025/03/31 9:45 p.m.63 views

CVE-2025-31688

CVE-2025-31688 is a Cross-Site Request Forgery (CSRF) vulnerability in the Drupal Configuration Split module. The issue affects Configuration Split versions prior to 1.10.0 and prior to 2.0.2 (i.e., 0.0.0–1.9.x and 2.0.0–2.0.1). The root cause is improper CSRF protection on routes that enable/dis...

6.8CVSS6.7AI score0.003EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/03/31 9:45 p.m.11 views

CVE-2025-31688 Configuration Split - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-017

Cross-Site Request Forgery CSRF vulnerability in Drupal Configuration Split allows Cross Site Request Forgery.This issue affects Configuration Split: from 0.0.0 before 1.10.0, from 2.0.0 before 2.0.2...

0.003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 9:45 p.m.6 views

CVE-2025-31688 Configuration Split - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-017

Cross-Site Request Forgery CSRF vulnerability in Drupal Configuration Split allows Cross Site Request Forgery.This issue affects Configuration Split: from 0.0.0 before 1.10.0, from 2.0.0 before 2.0.2...

6.6AI score0.003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/03/31 12:0 a.m.2 views

PT-2025-13852 · Unknown · Configuration Split

Name of the Vulnerable Software and Affected Versions: Configuration Split versions 0.0.0 through 1.9.x Configuration Split versions 2.0.0 through 2.0.1 Description: A Cross-Site Request Forgery CSRF issue affects the Configuration Split module, allowing unauthorized actions to be performed. This...

6.8CVSS6.5AI score0.003EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.1 views

Drupal Configuration Split 跨站请求伪造漏洞

Drupal Configuration Split is a module in the Drupal community. A cross-site request forgery vulnerability exists in Drupal Configuration Split versions prior to 1.10.0 and versions prior to 2.0.0 through 2.0.2, which stems from cross-site request forgery...

6.8CVSS6.5AI score0.003EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/03/28 3:39 a.m.1 views

SUSE CVE-2023-52929

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix cleanup after devsetname If devsetname fails, we leak nvmem-wpgpio as the cleanup does not put this. While a minimal fix for this would be to add the gpiodput call, we can do better if we split deviceregister, an...

5.5CVSS6.6AI score0.00044EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/03/28 3:38 a.m.2 views

SUSE CVE-2023-52941

In the Linux kernel, the following vulnerability has been resolved: can: isotp: split tx timer into transmission and timeout The timer for the transmission of isotp PDUs formerly had two functions: 1. send two consecutive frames with a given time gap 2. monitor the timeouts for flow control frame...

5.5CVSS6.5AI score0.00017EPSS
Exploits0References7
Rows per page
Query Builder