Lucene search
+L

278 matches found

Kaspersky
Kaspersky
added 2023/10/13 12:0 a.m.41 views

KLA61411 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in...

8.8CVSS8.5AI score0.0126EPSS
SaveExploits0References17
Citrix
Citrix
added 2023/10/05 12:0 a.m.6 views

How To: Update time zone on NetScaler

Change the default time zone of the NetScaler...

7.2AI score
SaveExploits0
OSV
OSV
added 2023/07/11 3:15 a.m.4 views

CVE-2023-2079

The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the recievepost, bmcdisconnect, namepost, and widgetpost functions in versions up to, and including, 3.7. This makes it possible for unauthenticated...

5.3CVSS7.3AI score0.0034EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/06/09 6:16 a.m.4 views

CVE-2023-2067

The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce validation on the 'bulletinwpupdatebulletinstatus', 'bulletinwpupdatebulletin', 'bulletinwpupdatesettings', 'bulletinwpupdatestatus',...

6.3CVSS6.8AI score0.00288EPSS
SaveExploits0References4
Kaspersky
Kaspersky
added 2023/06/02 12:0 a.m.48 views

KLA49377 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS9.5AI score0.23855EPSS
SaveExploits2References18
NVD
NVD
added 2023/05/12 7:15 p.m.22 views

CVE-2023-30247

File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the updatesettings parameter...

9.8CVSS9.6AI score0.01484EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/12 7:15 p.m.4 views

CVE-2023-30247

File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the updatesettings parameter...

9.8CVSS7.5AI score0.01484EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/12 7:15 p.m.15 views

Unrestricted file upload

File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the updatesettings parameter...

7.5CVSS9.6AI score0.01484EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/05/12 12:0 a.m.5 views

Storage Unit Rental Management System 代码问题漏洞

Sourcecodester Storage Unit Rental Management System is a storage unit rental management system that helps manage storage unit rental business records and monitor their records. A security vulnerability exists in Storage Unit Rental Management System version v.1.0, which stems from a file upload...

9.8CVSS8.9AI score0.01484EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2023/05/03 9:15 p.m.18 views

CVE-2023-1204

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically...

4.3CVSS5.8AI score0.00514EPSS
SaveExploits0References4
Prion
Prion
added 2023/05/03 9:15 p.m.14 views

Design/Logic Flaw

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically...

4CVSS4.6AI score0.00514EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/05/03 9:15 p.m.3 views

UBUNTU-CVE-2023-1204

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically...

4.3CVSS5.7AI score0.00514EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2023/05/03 12:0 a.m.31 views

CVE-2023-1204

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically...

5AI score0.00514EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/03 12:0 a.m.5 views

PT-2023-16819 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.1 through 15.10.7 GitLab CE/EE versions 15.11 through 15.11.6 GitLab CE/EE versions 16.0 through 16.0.1 Description: An issue has been discovered in GitLab CE/EE where a user could use an unverified email as a public...

4.3CVSS6.5AI score0.00514EPSS
SaveExploits0References14
Debian CVE
Debian CVE
added 2023/05/03 12:0 a.m.41 views

CVE-2023-1204

Removed by vendor...

4.3CVSS5.8AI score0.00514EPSS
SaveExploits0
0day.today
0day.today
added 2023/04/25 12:0 a.m.256 views

Multi-Vendor Online Groceries Management System 1.0 - Remote Code Execution Exploit

Exploit Title: Multi-Vendor Online Groceries Management System 1.0 - Remote Code Execution RCE Date: 4/23/2023 Author: Or4nG.M4n Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

6.8AI score
SaveExploits0
OSV
OSV
added 2023/04/14 12:15 p.m.6 views

CVE-2023-27666

Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the name parameter at /classes/SystemSettings.php?f=updatesettings...

6.1CVSS6.3AI score0.00357EPSS
SaveExploits0References3
NVD
NVD
added 2023/02/27 2:15 p.m.11 views

CVE-2023-1068

The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the readmoreexcerptlinkmenuoptions function. This makes it possible for unauthenticated attackers t...

4.3CVSS4.2AI score0.00296EPSS
SaveExploits0References3
OSV
OSV
added 2023/02/27 2:15 p.m.5 views

CVE-2023-1068

The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the readmoreexcerptlinkmenuoptions function. This makes it possible for unauthenticated attackers t...

4.3CVSS6.3AI score0.00296EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/02/27 12:0 a.m.6 views

WordPress Plugin Download Read More Excerpt Link 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.3CVSS6.2AI score0.00296EPSS
SaveExploits0References3
Rows per page
Query Builder