Lucene search
+L

15062 matches found

CVE
CVE
added 2023/07/14 12:00 a.m.93 views

CVE-2023-38286

Thymeleaf 3.1.1.RELEASE (used in Spring Boot Admin up to 3.1.1) is affected by a sandbox bypass via crafted HTML, enabling potential SSTI and code execution if MailNotifier is enabled with write access to environment variables in the UI. Affected products: Thymeleaf 3.1.1.RELEASE and Spring Boot ...

7.5CVSS7.8AI score0.00966EPSS
SaveExploits1References1Affected Software2
Citrix
Citrix
added 2023/07/14 12:00 a.m.12 views

Query to create a custom Smartcard FAS template

Request for instruction to modify FAS template or create a custom template with following configuration. Secure email Client authentication Smart card logon...

7AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/07/13 12:00 a.m.329 views

Bazaar Social Listing Shopping Web PHP Template 2.3.2 Privilege Escalation

==================================================================================================================================== | Title : Bazaar | Social Listing Shopping Web PHP Template v2.3.2 Privilege Escalation Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.P...

7.1AI score
SaveExploits0
OSV
OSV
added 2023/07/12 4:15 a.m.12 views

CVE-2021-4413

The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save field icons via a...

4.3CVSS5.6AI score0.00384EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2023/07/12 3:40 a.m.42 views

CVE-2021-4413 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass

The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save field icons via a...

4.3CVSS4.6AI score0.00384EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.13 views

WordPress Plugin Process Steps Template Designer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

4.3CVSS5AI score0.00384EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/07/12 12:00 a.m.10 views

PT-2023-12525 · WordPress · Process Steps Template Designer

Name of the Vulnerable Software and Affected Versions: Process Steps Template Designer plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save function. This allows...

4.3CVSS4.4AI score0.00384EPSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2023/07/11 6:15 p.m.7 views

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

6.7CVSS5.8AI score0.0036EPSS
SaveExploits0References2Affected Software21
NVD
NVD
added 2023/07/11 6:15 p.m.34 views

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

6.7CVSS7.9AI score0.0036EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/11 6:15 p.m.11 views

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

6.7CVSS7.3AI score0.0036EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/11 6:15 p.m.22 views

Privilege escalation

Active Template Library Elevation of Privilege Vulnerability...

4CVSS7AI score0.0036EPSS
SaveExploits0References1Affected Software9
PyPA
PyPA
added 2023/07/11 6:15 p.m.9 views

PYSEC-2023-118

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS7.6AI score0.00847EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/11 5:03 p.m.20 views

CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability

...

6.7CVSS7.2AI score0.0036EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/11 5:03 p.m.51 views

CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability

...

6.7CVSS8.1AI score0.0036EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 5:03 p.m.127 views

CVE-2023-32055

CVE-2023-32055 is an Active Template Library Elevation of Privilege vulnerability with CVSSv3.1 base score 6.7 (Medium). It is a Local attack requiring HIGH privileges and no user interaction, with impact to confidentiality, integrity, and availability rated High. The entry references a Microsoft...

6.7CVSS7.9AI score0.0036EPSS
SaveExploits0References1Affected Software12
OSV
OSV
added 2023/07/11 1:15 p.m.18 views

CVE-2023-35773

Cross-Site Request Forgery CSRF vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin = 3.1.2 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/11 1:15 p.m.33 views

CVE-2023-35773

Cross-Site Request Forgery CSRF vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin = 3.1.2 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/11 1:15 p.m.23 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin = 3.1.2 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/11 12:42 p.m.18 views

CVE-2023-35773 WordPress Template Debugger Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin = 3.1.2 versions...

4.3CVSS7.1AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/11 12:42 p.m.73 views

CVE-2023-35773

CVE-2023-35773 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Template Debugger plugin (Danny Hearnah - ChubbyNinjaa) affecting versions

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder