Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 10:13 a.m.4 views

CVE-2024-3242

The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent function called via storeImages in all versions up to, and including, 2.4.43. This makes it possible for authenticated attackers, with...

8.8CVSS7.6AI score0.06631EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/16 12:0 a.m.3 views

PT-2024-18436 · WordPress · Brizy

Name of the Vulnerable Software and Affected Versions: Brizy – Page Builder plugin for WordPress versions up to, and including, 2.4.44 Description: The issue allows authenticated attackers with contributor access and above to modify the content of arbitrary published posts due to a missing...

7.1CVSS6.8AI score0.00164EPSS
Exploits0References6
Patchstack
Patchstack
added 2024/05/23 12:0 a.m.11 views

WordPress Brizy Plugin <= 2.4.43 is vulnerable to Broken Access Control

Software Brizy Type Plugin Vulnerable versions = 2.4.43 Fixed in 2.4.44 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3711 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6a9b9ee44fc3 Credits Lucio Sá Required privilege Contributo...

4.3CVSS6.6AI score0.00273EPSS
Exploits0References3Affected Software1
Debian
Debian
added 2021/02/03 10:5 a.m.94 views

[SECURITY] [DLA 2544-1] openldap security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2544-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 03, 2021 https://wiki.debian.org/LTS -...

7.5CVSS8.8AI score0.7152EPSS
Exploits0
Oracle linux
Oracle linux
added 2020/10/06 12:0 a.m.31 views

openldap security update

2.4.44-22 - Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters 1838405...

7.5CVSS3AI score0.11875EPSS
Exploits1
OpenVAS
OpenVAS
added 2020/08/10 12:0 a.m.41 views

Apache HTTP Server 2.4.20 < 2.4.44 Multiple Vulnerabilities - Linux

Apache HTTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:httpserver"; if...

7.5CVSS8.9AI score0.76276EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2020/08/10 12:0 a.m.28 views

Apache HTTP Server 2.4.32 < 2.4.44 mod_proxy_uwsgi Buffer Overflow Vulnerability - Linux

Apache HTTP Server is prone to a buffer overflow vulnerability in modproxyuwsgi. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS9.8AI score0.7629EPSS
Exploits2References1
Rows per page
Query Builder