Lucene search
+L

25090 matches found

Vulnrichment
Vulnrichment
•added 2024/12/13 2:25 p.m.•12 views

CVE-2024-54321 WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hive Support Hive Support – WordPress Help Desk allows Cross Site Request Forgery.This issue affects Hive Support – WordPress Help Desk: from n/a through 1.1.2...

4.3CVSS7AI score0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:25 p.m.•28 views

CVE-2024-54321 WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Hive Support Hive Support hive-support allows Cross Site Request Forgery.This issue affects Hive Support: from n/a through = 1.1.2...

4.3CVSS0.00236EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:25 p.m.•70 views

CVE-2024-54321

CVE-2024-54321: CSRF vulnerability in the Hive Support WordPress Help Desk plugin; affects Hive Support – WordPress Help Desk versions up to 1.1.2. The connected documents confirm CSRF wording but do not provide detailed exploit steps, affected files, root cause, or a concrete mitigation beyond t...

4.3CVSS7.2AI score0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:25 p.m.•32 views

CVE-2024-54304 WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hive Support Hive Support hive-support allows SQL Injection.This issue affects Hive Support: from n/a through = 1.1.2...

8.5CVSS0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:25 p.m.•9 views

CVE-2024-54304 WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hive Support Hive Support – WordPress Help Desk allows SQL Injection.This issue affects Hive Support – WordPress Help Desk: from n/a through 1.1.2...

8.5CVSS7.7AI score0.00504EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:25 p.m.•74 views

CVE-2024-54304

CVE-2024-54304 is an SQL Injection in the Hive Support WordPress Help Desk plugin. Affected: Hive Support – WordPress Help Desk (plugin) versions up to 1.1.2. Root cause: Improper neutralization of SQL elements in the vulnerability path. Impact: authenticated attackers may exploit to manipulate S...

8.5CVSS7.3AI score0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:25 p.m.•17 views

CVE-2024-54289 WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through = 6.3.1...

6.5CVSS7.2AI score0.00604EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:25 p.m.•59 views

CVE-2024-54289

CVE-2024-54289 represents a Missing Authorization vulnerability in Awesome Support (WordPress plugin) up to version 6.3.0. The issue stems from incorrectly configured access control security levels that could let an attacker gain unauthorized privileged access. Connected advisories (e.g., Red Hat...

6.5CVSS7.2AI score0.00604EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:24 p.m.•12 views

CVE-2024-54274 WordPress Octrace Support plugin <= 1.2.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Octrace Studio WordPress HelpDesk & Support Ticket System Plugin – Octrace Support allows Reflected XSS.This issue affects WordPress HelpDesk & Support Ticket System Plugin – Octrace Support: from...

7.1CVSS7.1AI score0.00436EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:24 p.m.•62 views

CVE-2024-54274

CVE-2024-54274 is a Reflected XSS in the WordPress plugin WordPress HelpDesk & Support Ticket System Plugin – Octrace Support. Affected versions are up to 1.2.7; the root cause is Improper Neutralization of Input During Web Page Generation. The Wordfence digest notes Patch Status as Unpatched; no...

7.1CVSS7.2AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:24 p.m.•33 views

CVE-2024-54274 WordPress Octrace Support plugin <= 1.2.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Octrace WordPress HelpDesk & Support Ticket System Plugin – Octrace Support octrace-support allows Reflected XSS.This issue affects WordPress HelpDesk & Support Ticket System Plugin – Octrace...

7.1CVSS0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:24 p.m.•51 views

CVE-2023-41686 WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ilGhera Woocommerce Support System allows Cross Site Request Forgery.This issue affects Woocommerce Support System: from n/a through 1.2.2...

6.5CVSS0.00323EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:15 p.m.•23 views

CVE-2024-47984

Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention ...

4.4CVSS7.2AI score0.00466EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:15 p.m.•82 views

CVE-2024-47984

Dell RecoverPoint for Virtual Machines 6.0.x has a Denial of Service vulnerability (CVE-2024-47984). A user with remote access could exploit it to disrupt most functionalities of the RPA, with effects persisting after reboot and requiring technical support to restore stability. The connected PT-2...

6.5CVSS4.9AI score0.00466EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/12/13 2:15 p.m.•66 views

CVE-2024-47984

Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention ...

4.4CVSS0.00466EPSS
SaveExploits0References1
Fedora
Fedora
•added 2024/12/13 1:35 a.m.•27 views

[SECURITY] Fedora 41 Update: chromium-131.0.6778.139-1.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

8.8CVSS7.5AI score0.04908EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•19 views

PT-2024-36185 · WordPress · Hive Support – Wordpress Help Desk

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

8.5CVSS8AI score0.00504EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•7 views

CVE-2024-54289: Missing Authorization

Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through = 6.3.1...

6.5CVSS5.9AI score0.00604EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•16 views

WordPress plugin Awesome Support 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

6.5CVSS8.4AI score0.00604EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•3 views

PT-2024-36204

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. This can lead to various security problems, as an attacker could...

4.3CVSS0.00236EPSS
SaveExploits0References4
Rows per page
Query Builder