Lucene search
+L

12007 matches found

Cvelist
Cvelist
added 2024/09/17 10:29 p.m.42 views

CVE-2024-43978 WordPress Super Store Finder plugin < 6.9.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through 6.9.8...

9.3CVSS0.00458EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/17 10:29 p.m.67 views

CVE-2024-43978

CVE-2024-43978 is a SQL Injection vulnerability in the WordPress plugin Super Store Finder prior to version 6.9.8. The issue arises from improper neutralization of input in SQL commands, enabling unauthenticated SQL injection (as reported for versions ≤6.9.7). Public advisories in connected recor...

9.8CVSS5.9AI score0.00458EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/17 10:29 p.m.21 views

CVE-2024-43978 WordPress Super Store Finder plugin < 6.9.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through 6.9.8...

9.3CVSS5.9AI score0.00458EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/17 12:00 a.m.9 views

PT-2024-30841 · Unknown · Super Store Finder

Name of the Vulnerable Software and Affected Versions: Super Store Finder versions prior to 6.9.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially enabling...

9.8CVSS7.8AI score0.00458EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/09/17 12:00 a.m.13 views

WordPress plugin Super Store Finder SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A SQL injection...

9.8CVSS7.7AI score0.00458EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/09/17 12:00 a.m.10 views

WordPress plugin Super Store Finder SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A SQL injection...

9.8CVSS7.9AI score0.00458EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/09/17 12:00 a.m.9 views

WordPress plugin Super Store Finder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS6AI score0.00271EPSS
SaveExploits0References3
OSV
OSV
added 2024/09/16 6:31 p.m.16 views

RHSA-2024:2732 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-glance-store) security update

Bulletin has no description...

5.5CVSS5.3AI score0.00226EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/09/16 12:00 a.m.10 views

FluxCP 安全漏洞

FluxCP is an open source web-based control panel by rAthena. It is used for rAntha servers written in PHP. A security vulnerability exists in FluxCP versions prior to 1.3 that stems from unfiltered venders/buyers listings pages and store names that allow the execution of arbitrary javascript code...

7.3CVSS6.6AI score0.00283EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2024/09/12 4:12 p.m.23 views

New Android Malware 'Ajina.Banker' Steals Financial Data and Bypasses 2FA via Telegram

Bank customers in the Central Asia region have been targeted by a new strain of Android malware codenamed Ajina.Banker since at least November 2023 with the goal of harvesting financial information and intercepting two-factor authentication 2FA messages. Singapore-headquartered Group-IB, which...

7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/09/10 7:00 a.m.101 views

September 10, 2024—KB5043083 (OS Build 10240.20766) - EXPIRED

None None...

9.8CVSS6.8AI score0.54486EPSS
SaveExploits3
NVD
NVD
added 2024/09/08 12:15 a.m.19 views

CVE-2024-8566

A vulnerability classified as problematic was found in code-projects Online Shop Store 1.0. This vulnerability affects unknown code of the file /settings.php. The manipulation of the argument error leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

6.9CVSS0.00433EPSS
SaveExploits0References5
OSV
OSV
added 2024/09/08 12:15 a.m.7 views

CVE-2024-8566

A vulnerability classified as problematic was found in code-projects Online Shop Store 1.0. This vulnerability affects unknown code of the file /settings.php. The manipulation of the argument error leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

6.1CVSS3.9AI score0.00433EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/09/08 12:00 a.m.7 views

Online Shop Store 跨站脚本漏洞

Online Shop Store is an online store system. A cross-site scripting vulnerability exists in Online Shop Store version 1.0, which originates from unknown code in the file /settings.php, where improper manipulation of parameters can lead to cross-site scripting attacks...

6.9CVSS4.6AI score0.00433EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/09/07 11:31 p.m.34 views

CVE-2024-8566 code-projects Online Shop Store settings.php cross site scripting

A vulnerability classified as problematic was found in code-projects Online Shop Store 1.0. This vulnerability affects unknown code of the file /settings.php. The manipulation of the argument error leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

6.9CVSS0.00433EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/09/07 11:31 p.m.16 views

CVE-2024-8566 code-projects Online Shop Store settings.php cross site scripting

A vulnerability classified as problematic was found in code-projects Online Shop Store 1.0. This vulnerability affects unknown code of the file /settings.php. The manipulation of the argument error leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

6.9CVSS6.4AI score0.00433EPSS
SaveExploits0References5
CVE
CVE
added 2024/09/07 11:31 p.m.58 views

CVE-2024-8566

CVE-2024-8566 affects code-projects Online Shop Store 1.0, via the unknown code in /settings.php where manipulation of the error parameter enables cross-site scripting. The vulnerability can be exploited remotely and exploits have been disclosed publicly. Multiple connected sources consistently d...

6.9CVSS4.7AI score0.00433EPSS
SaveExploits0References5Affected Software1
SUSE CVE
SUSE CVE
added 2024/09/05 2:46 a.m.6 views

SUSE CVE-2024-44969

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or firmware problem, ther...

5.5CVSS6.5AI score0.0022EPSS
SaveExploits0References17
OSV
OSV
added 2024/09/04 7:15 p.m.4 views

DEBIAN-CVE-2024-44969

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or firmware problem, ther...

5.5CVSS5.8AI score0.0022EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/04 7:15 p.m.21 views

AZL-49881 CVE-2024-44969 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or firmware problem, ther...

5.5CVSS6.8AI score0.0022EPSS
SaveExploits0References1
Rows per page
Query Builder