Lucene search
K

4 matches found

Patchstack
Patchstack
added 2025/08/26 10:32 a.m.4 views

WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Poll, Survey & Quiz Maker Plugin by Opinion Stage versions = 19.11.0...

7.5CVSS6.7AI score0.00144EPSS
Exploits1Affected Software1
Prion
Prion
added 2022/10/14 7:15 p.m.14 views

Design/Logic Flaw

GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions from 19.2.0 to 19.10.0 inclusive are subject to a timing attack in validation of access tokens due to use of regular string comparison f...

2.6CVSS5.5AI score0.00406EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/10/14 12:0 a.m.20 views

CVE-2022-39308 GoCD API authentication of user access tokens subject to timing attack during comparison

GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions from 19.2.0 to 19.10.0 inclusive are subject to a timing attack in validation of access tokens due to use of regular string comparison f...

6.5CVSS5.7AI score0.00406EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/05/20 12:0 a.m.0 views

GoCD 跨站脚本漏洞

GoCD is a continuous delivery server. A cross-site scripting vulnerability exists in GoCD versions 19.11.0 through 21.4.0, which could be exploited by attackers to obtain a GoCD user's session cookie and execute malicious code...

5.4CVSS5.2AI score0.005EPSS
Exploits0References5
Rows per page
Query Builder