Lucene search
+L

6655 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•7 views

CVE-2023-33106: Use of Out-of-range Pointer Offset

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTLKGSLGPUAUXCOMMAND...

8.4CVSS7.9AI score0.00788EPSS
SaveExploits0References3
Microsoft Security Update
Microsoft Security Update
•added 2023/12/04 6:00 p.m.•21 views

Azure File Sync Agent v17.0 Release – December 2023 (KB5023053)

Update for Azure File Sync agent version 17.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

7.3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2023/12/04 6:00 p.m.•17 views

Azure File Sync Agent v17.0 Release – December 2023 (KB5023053)

Update for Azure File Sync agent version 17.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

7.3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2023/12/04 6:00 p.m.•14 views

Azure File Sync Agent v17.0 Release – December 2023 (KB5023053)

Update for Azure File Sync agent version 17.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

7.3AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/11/30 2:04 a.m.•12 views

SUSE CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS6AI score0.00722EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2023/11/28 5:15 p.m.•16 views

DEBIAN-CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS6AI score0.00722EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2023/11/28 5:15 p.m.•22 views

AZL-32050 CVE-2023-45286 affecting package packer for versions less than 1.8.7-1

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS6AI score0.00722EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2023/11/28 3:40 p.m.•100 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.7AI score0.03047EPSS
SaveExploits3References12
WPVulnDB
WPVulnDB
•added 2023/11/24 12:00 a.m.•18 views

iThemes Sync < 2.1.14 - Cross-Site Request Forgery and Missing Authorization via 'hide_authenticate_notice'

Description The iThemes Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.13. This is due to missing or incorrect nonce validation on the hideauthenticatenotice function. This makes it possible for unauthenticated attackers to hide admin...

6.6AI score0.00489EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2023/11/22 2:15 p.m.•14 views

CVE-2023-26535

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

8.8CVSS7.3AI score0.003EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/22 2:15 p.m.•35 views

CVE-2023-26535

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

8.8CVSS0.003EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/22 2:15 p.m.•24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

6.8CVSS7.3AI score0.003EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/22 2:05 p.m.•12 views

CVE-2023-26535 WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

5.4CVSS7.4AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/22 2:05 p.m.•44 views

CVE-2023-26535 WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

5.4CVSS9AI score0.003EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/22 2:05 p.m.•60 views

CVE-2023-26535

CVE-2023-26535: Cross-Site Request Forgery in WordPress Sheets To WP Table Live Sync plugin (

8.8CVSS7.1AI score0.003EPSS
SaveExploits0References1Affected Software1
Citrix
Citrix
•added 2023/11/22 12:00 a.m.•32 views

Citrix Delivery Controllers generates Event ID 505 and Event ID 3602 continuously

Upgrading CVAD version to 2308 generates“Citrix ConfigSync Service” with "Event ID “505 ” and "Citrix High Availability Service" with "Event ID 3602" The Citrix Config Sync Service failed an import. Error details: Error importing configuration data into secondary Broker...

7.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/11/22 12:00 a.m.•11 views

WordPress Plugin Sheets To WP Table Live Sync Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS7.9AI score0.003EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/22 12:00 a.m.•4 views

PT-2023-20711

Name of the Vulnerable Software and Affected Versions WPPOOL Sheets To WP Table Live Sync plugin versions = 2.12.15 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

8.8CVSS5.9AI score0.003EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•7 views

CVE-2023-26535: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPPOOL Sheets To WP Table Live Sync plugin = 2.12.15 versions...

8.8CVSS7.9AI score0.003EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2023/11/13 12:00 a.m.•11 views

VulnCheck KEV: CVE-2022-2488

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

9.8CVSS7.9AI score0.33411EPSS
SaveIn wildExploits1References721
Rows per page
Query Builder