Lucene search
+L

1149 matches found

Cvelist
Cvelist
•added 2024/06/04 1:48 p.m.•52 views

CVE-2024-35668 WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS6.5AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•2 views

CVE-2024-35668: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•27 views

RHEL 7 : gupnp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - hostapd: UPnP SUBSCRIBE misbehavior in WPS AP CVE-2020-12695 Note that Nessus has not tested for this issue but has...

7.5CVSS6.6AI score0.15193EPSS
SaveExploits4References1
Fedora
Fedora
•added 2024/05/29 3:37 a.m.•26 views

[SECURITY] Fedora 40 Update: qt6-qtmqtt-6.7.1-1.fc40

MQTT is a machine-to-machine M2M protocol utilizing the publish-and-subscri be paradigm, and provides a channel with minimal communication overhead. The Qt MQTT module provides a standard compliant implementation of the MQTT protocol specification. It enables applications to act as telemetry...

9.8CVSS6.7AI score0.0097EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•19 views

eProsima Fast DDS 安全漏洞

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS, which stems from a potential process crash when a publisher provides an incorrectly formatted RTPS packet...

8.2CVSS6.5AI score0.00791EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•18 views

eProsima Fast DDS 缓冲区错误漏洞

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS that stems from a heap buffer overflow that occurs when a publisher provides an incorrectly formatted RTPS packet...

8.2CVSS6.9AI score0.00866EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2024/05/06 12:00 a.m.•15 views

The vulnerability of the PowerPanel Business’s monitoring and power source management system lies in the lack of measures to protect the SQL query structure. This allows attackers to execute arbitrary SQL code and write arbitrary files.

The vulnerability of the PowerPanel Business monitoring and power source management system lies in the lack of measures taken to protect the SQL query structure during the processing of MQTT messages. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code and write...

8.8CVSS6.1AI score0.00533EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2024/05/02 7:13 a.m.•24 views

Denial Of Service (DoS)

github.com/onosproject/onos-ric-sdk-go is vulnerable to Denial of Service DoS.The vulnerability is due to indefinite repetition of error processing within the Subscribe function when handling the subscribed indication stream. This issue may lead to resource exhaustion...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2024/04/30 12:15 a.m.•7 views

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.5CVSS5.8AI score0.00422EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/30 12:15 a.m.•20 views

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.5CVSS6.6AI score0.00422EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•16 views

PT-2024-14715 · Open Networking Foundation · Onos-Ric-Sdk-Go

Name of the Vulnerable Software and Affected Versions: Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go version 0.8.12 Description: The issue allows for infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.5CVSS6.3AI score0.00422EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•4 views

CVE-2023-52726: Loop with Unreachable Exit Condition

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.5CVSS5.8AI score0.00422EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/10 4:15 p.m.•15 views

CVE-2024-31249

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

7.5CVSS7.3AI score0.00514EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/10 4:15 p.m.•31 views

CVE-2024-31249

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

7.5CVSS5.3AI score0.00514EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/10 3:48 p.m.•38 views

CVE-2024-31249 WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

5.3CVSS5.6AI score0.00514EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/10 3:48 p.m.•92 views

CVE-2024-31249

CVE-2024-31249 is a vulnerability described as an Insertion of Sensitive Information into Log File affecting the WordPress plugin Subscribe To Comments Reloaded (WPKube). Public details indicate the issue impacts the Subscribe To Comments Reloaded plugin up to version 220725 (n/a through 220725)....

7.5CVSS8.6AI score0.00514EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/04/10 3:48 p.m.•14 views

CVE-2024-31249 WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

5.3CVSS8.5AI score0.00514EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•4 views

CVE-2024-31249: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

7.5CVSS5.8AI score0.00514EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2024/04/05 12:00 a.m.•18 views

WordPress Subscribe To Comments Reloaded Plugin <= 220725 is vulnerable to Sensitive Data Exposure

Software Subscribe To Comments Reloaded Type Plugin Vulnerable versions = 220725 Fixed in 240119 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-31249 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 45c0e6e3acea...

7.5CVSS6.5AI score0.00514EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/05 12:00 a.m.•22 views

PT-2024-23891

Name of the Vulnerable Software and Affected Versions WPKube Subscribe To Comments Reloaded versions from n/a through 220725 Description The issue is related to the insertion of sensitive information into log files. This can potentially expose sensitive data. Recommendations For versions from n/a...

7.5CVSS8.4AI score0.00514EPSS
SaveExploits0References8
Rows per page
Query Builder