Lucene search
+L

489 matches found

Mend
Mend
•added 2024/11/03 10:16 a.m.•6 views

WS-2022-0283

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

9.8CVSS5.9AI score
SaveExploits0References4
Mend
Mend
•added 2024/11/03 10:16 a.m.•5 views

WS-2023-0048

Affected versions of this crate were using a debug assertion to validate the last parameter of partialsort. This would allow invalid inputs to cause an out-of-bounds read instead of immediately panicking, when compiled without debug assertions. All writes are bounds-checked, so the out-of-bounds...

5.3CVSS5.7AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•6 views

Malware in availab-le-alb-um-zip-26387-this-is-the-second-album-of-a-band-called-adebisi-shank-pdmrd-ikxtvt

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Microsoft KB
Microsoft KB
•added 2024/10/08 7:00 a.m.•86 views

October 8, 2024—KB5044306 (Security-only update)

None None...

9CVSS7AI score0.66695EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2024/10/08 12:00 a.m.•4 views

PT-2024-33924

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A warning is triggered in the Linux kernel when there is insufficient space in the buffer for userdata. However, this is not an issue since userdata will be sent in the next iteration...

3.3CVSS0.00199EPSS
SaveExploits0
NVD
NVD
•added 2024/10/06 11:15 a.m.•21 views

CVE-2024-47326

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...

7.1CVSS0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/06 11:07 a.m.•44 views

CVE-2024-47326 WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...

7.1CVSS0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/06 11:07 a.m.•13 views

CVE-2024-47326 WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/06 11:07 a.m.•62 views

CVE-2024-47326

CVE-2024-47326 describes a Reflected XSS in the WordPress Share This Image plugin (versions

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/06 12:00 a.m.•8 views

CVE-2024-47326: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...

7.1CVSS5.8AI score0.0032EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/09/25 11:20 a.m.•15 views

WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Share This Image versions = 2.01...

7.1CVSS6.1AI score0.0032EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/09/25 12:00 a.m.•25 views

WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47326 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a0ec6e566511 Credits Dimas Maulana Required privilege...

7.1CVSS6.5AI score0.0032EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/09/17 9:15 a.m.•35 views

CVE-2024-8761

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

7.2CVSS0.00471EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/09/17 8:30 a.m.•10 views

CVE-2024-8761 Share This Image <= 2.03 - Open Redirect via link Parameter

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

7.2CVSS6.8AI score0.00471EPSS
SaveExploits0References6
CVE
CVE
•added 2024/09/17 8:30 a.m.•90 views

CVE-2024-8761

The CVE-2024-8761 entry describes an Open Redirect in the WordPress plugin Share This Image for versions up to 2.03, caused by insufficient validation of the link parameter. This enables unauthenticated attackers to redirect users to potentially malicious sites. Remediation: upgrade to version 2....

7.2CVSS6.6AI score0.00471EPSS
SaveExploits0References6Affected Software1
Patchstack
Patchstack
•added 2024/09/17 3:12 a.m.•20 views

WordPress Share This Image plugin <= 2.03 - Open Redirect via link Parameter vulnerability

Open Redirect via link Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin Share This Image versions = 2.03...

7.2CVSS7AI score0.00471EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•12 views

CVE-2024-8761: URL Redirection to Untrusted Site

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

7.2CVSS5.8AI score0.00471EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/09/17 12:00 a.m.•16 views

WordPress plugin “Share This Image” has a vulnerability in input validation.

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabili...

7.2CVSS6.5AI score0.00471EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/09/17 12:00 a.m.•19 views

PT-2024-39234 · WordPress · Share This Image

Name of the Vulnerable Software and Affected Versions: Share This Image plugin for WordPress versions up to, and including, 2.03 Description: The issue is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to...

7.2CVSS7.1AI score0.00471EPSS
SaveExploits0References15
Patchstack
Patchstack
•added 2024/09/17 12:00 a.m.•25 views

WordPress Share This Image Plugin <= 2.03 is vulnerable to Open Redirection

Software Share This Image Type Plugin Vulnerable versions = 2.03 Fixed in 2.04 OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2024-8761 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 2b483c93b8d5 Credits Krzysztof Zając Required privilege Unauthenticat...

7.2CVSS6.9AI score0.00471EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder