Lucene search
+L

8423 matches found

Vulnrichment
Vulnrichment
added 2024/10/24 11:37 a.m.21 views

CVE-2024-49683 WordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Magazine3 Schema & Structured Data for WP & AMP schema-and-structured-data-for-wp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Schema & Structured Data for WP & AMP: from n/a through = 1.3.5...

5.3CVSS5.9AI score0.00345EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/24 11:37 a.m.62 views

CVE-2024-49683

CVE-2024-49683 affects the WordPress plugin Schema & Structured Data for WP & AMP (versions 1.3.5 (e.g., 1.3.6 or 1.36) to resolve the vulnerability.

5.3CVSS5.9AI score0.00345EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/24 11:37 a.m.34 views

CVE-2024-49683 WordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Magazine3 Schema & Structured Data for WP & AMP schema-and-structured-data-for-wp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Schema & Structured Data for WP & AMP: from n/a through = 1.3.5...

5.3CVSS0.00345EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/24 12:00 a.m.17 views

PT-2024-33636 · Unknown · Schema & Structured Data For Wp & Amp

Name of the Vulnerable Software and Affected Versions: Schema & Structured Data for WP & AMP versions 1.3.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This mean...

5.3CVSS6.7AI score0.00345EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.9 views

WordPress plugin Product Filter by WBW SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.6CVSS7.8AI score0.00418EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.22 views

WordPress plugin Schema & Structured Data for WP & AMP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.5AI score0.00345EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.10 views

Code-Projects Hospital Management System SQL注入漏洞

Hospital Management System a hospital management system. Hospital Management System has a SQL injection vulnerability that originates from the parameter docname in the file /admin/add-doctor.php that can lead to SQL injection. No details of the vulnerability are available at this time...

9.8CVSS5.8AI score0.00573EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.8 views

SourceCodeHero Clothes Recommendation System SQL注入漏洞

SourceCodeHero Clothes Recommendation System is a SourceCodeHero open source clothing recommendation system. SourceCodeHero Clothes Recommendation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter t1 in the file /admin/index.php of the component...

9.8CVSS7.8AI score0.00633EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.8 views

The vulnerability of the Vinteo video conference software server lies in the lack of protective measures for SQL query structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Vinteo video conference software server relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code using a specially crafted SQL query...

10CVSS6.1AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.8 views

Cisco Secure Firewall Management Center 安全漏洞

Cisco Secure Firewall Management Center is a powerful network security management tool from Cisco USA. A security vulnerability exists in Cisco Secure Firewall Management Center that originates from the web management interface not adequately validating user input. An attacker could exploit this...

6.5CVSS7.6AI score0.00442EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.9 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG 5 suffers from a SQL injection vulnerability, which originates from the userId parameter of the /com/esafenet/servlet/user/ReUserOrganiseService.java page contains a SQL injection vulnerability...

9.8CVSS7.9AI score0.00599EPSS
SaveExploits1References4
OSV
OSV
added 2024/10/22 10:15 p.m.11 views

CVE-2024-48657

SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code...

7.2CVSS6.1AI score0.00871EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/21 9:15 p.m.14 views

CVE-2024-30158

A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute...

7.2CVSS6AI score0.00414EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 9:15 p.m.9 views

CVE-2024-30157

A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to...

7.2CVSS6AI score0.00414EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 8:15 p.m.9 views

CVE-2024-47223

A vulnerability in the AWV Audio, Web and Video Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access...

9.4CVSS7.7AI score0.00477EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/21 9:25 a.m.9 views

WordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Schema & Structured Data for WP & AMP versions = 1.3.5...

5.3CVSS7AI score0.00345EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/21 9:21 a.m.13 views

WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.0.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin WP Sessions Time Monitoring Full Automatic versions = 1.0.9...

9.3CVSS8.1AI score0.01091EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.9 views

Mitel MiCollab 安全漏洞

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A SQL injection vulnerability exists in Mitel MiCollab version 9.7.1.110 and earlier, which stems from insufficient validation of user input in...

7.2CVSS7.9AI score0.00414EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.9 views

Mitel MiCollab SQL注入漏洞

Mitel MiCollab is an enterprise-grade audio, web and video conferencing solution that provides efficient collaboration and communication capabilities. An SQL injection vulnerability exists in Mitel MiCollab, which can be exploited by an attacker to access non-sensitive user configuration...

9.4CVSS8.1AI score0.00477EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.6 views

Mitel MiCollab SQL注入漏洞

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. Mitel MiCollab suffers from an SQL injection vulnerability that can be exploited by attackers to access sensitive information and perform...

9.8CVSS7.7AI score0.65367EPSS
SaveExploits0References2
Rows per page
Query Builder