Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/10/01 6:20 a.m.2 views

CVE-2025-11163

The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...

4.3CVSS5.1AI score0.00034EPSS
Exploits0References1
NVD
NVD
added 2025/09/30 11:37 a.m.1 views

CVE-2025-11163

The SmartCrawl SEO checker, analyzer & optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesubmodule function in all versions up to, and including, 3.14.3. This makes it possible for authenticated attackers, with...

4.3CVSS0.00034EPSS
Exploits0References3
CVE
CVE
added 2025/09/30 5:28 a.m.14 views

CVE-2025-11163

The CVE-2025-11163 entry concerns the SmartCrawl SEO checker, analyzer & optimizer WordPress plugin. It reports a Missing Authorization to Plugin Settings Update vulnerability in all versions up to 3.14.3, enabling authenticated attackers with Subscriber-level access and above to modify the plugi...

4.3CVSS4.7AI score0.00034EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/09/30 12:0 a.m.1 views

PT-2025-39960

Name of the Vulnerable Software and Affected Versions SmartCrawl SEO plugin for WordPress versions prior to 3.14.4 Description The SmartCrawl SEO plugin for WordPress has an issue where data can be modified without authorization. This is due to a missing capability check within the update submodu...

4.3CVSS6.4AI score0.00034EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/09/30 12:0 a.m.1 views

WordPress plugin SmartCrawl 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An access...

4.3CVSS6.3AI score0.00034EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2024/02/27 7:4 p.m.20 views

CVE-2024-27099

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQPVALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987...

9.8CVSS6.9AI score0.01498EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/02/27 6:58 p.m.27 views

CVE-2024-27099 Azure IoT Platform Device SDK Double Free Vulnerability

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQPVALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987...

9.8CVSS6.7AI score0.01498EPSS
Exploits0References2
OSV
OSV
added 2024/02/27 6:58 p.m.21 views

CVE-2024-27099 Azure IoT Platform Device SDK Double Free Vulnerability

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQPVALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987...

9.8CVSS7.6AI score0.01498EPSS
Exploits0References4
OSV
OSV
added 2024/02/12 8:15 p.m.1 views

AZL-34349 CVE-2024-25110 affecting package azure-iot-sdk-c for versions less than 2022.01.21-3

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

8.1CVSS7.2AI score0.00739EPSS
Exploits0References1
OSV
OSV
added 2024/02/12 8:15 p.m.1 views

AZL-34556 CVE-2024-25110 affecting package azure-iot-sdk-c for versions less than 2024.03.04-1

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

8.1CVSS6.1AI score0.00739EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/02/12 8:15 p.m.36 views

CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

9.8CVSS7.1AI score0.00739EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2024/02/12 7:58 p.m.21 views

CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

9.8CVSS8.1AI score0.00739EPSS
Exploits0
Rows per page
Query Builder