Lucene search
+L

12324 matches found

Fedora
Fedora
added 2024/06/05 1:41 a.m.20 views

[SECURITY] Fedora 40 Update: qt5-qtcharts-5.15.14-1.fc40

Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...

9.8CVSS6.6AI score0.0097EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/06/04 9:29 a.m.29 views

CVE-2023-46630 WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability

Improper Authentication vulnerability in wpase Admin and Site Enhancements ASE allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Admin and Site Enhancements ASE: from n/a through 5.7.1...

7.5CVSS7AI score0.00447EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/04 9:29 a.m.56 views

CVE-2023-46630 WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability

Improper Authentication vulnerability in wpase Admin and Site Enhancements ASE allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Admin and Site Enhancements ASE: from n/a through 5.7.1...

7.5CVSS7.6AI score0.00447EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/03 11:15 p.m.37 views

CVE-2023-28492

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10...

4.3CVSS4.7AI score0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/03 10:09 p.m.19 views

CVE-2023-28492 WordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerability

Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10...

4.3CVSS6.9AI score0.00311EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/03 12:00 a.m.12 views

PT-2024-12166 · Codepeople · Codepeople Cp Multi View Event Calendar

Name of the Vulnerable Software and Affected Versions: CodePeople CP Multi View Event Calendar versions 1.4.10 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing functionality misuse in the CodePeople CP Multi View Event Calendar. Recommendations: For...

4.3CVSS8.5AI score0.00311EPSS
SaveExploits0References8
OSV
OSV
added 2024/05/30 5:15 p.m.9 views

CVE-2024-35359

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewitem. Manipulating the argument id can result in SQL injection...

9.8CVSS5.8AI score0.00429EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/30 5:15 p.m.6 views

CVE-2024-35350

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/viewborrow. Manipulating the argument id can result in SQL injection...

9.8CVSS5.8AI score0.00531EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/30 5:15 p.m.7 views

CVE-2024-35349

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/viewcategory.php. Manipulating the argument id can result in SQL injection...

9.8CVSS5.8AI score0.00538EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/30 4:15 p.m.6 views

CVE-2024-35358

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewcategory. Manipulating the argument id can result in SQL injection...

6.5CVSS5.8AI score0.00407EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/05/30 12:00 a.m.7 views

Dino Physics School Assistant SQL注入漏洞

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which originates from unrecognized code in /admin/category/viewcategory.php, which leads to SQL injection via the parameter id...

9.8CVSS8.1AI score0.00538EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/05/30 12:00 a.m.7 views

MeterSphere 安全漏洞

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. A security vulnerability exists in versions prior to MeterSphere 2.10.15-lts that stems from allowing users without workspace privileges to view functional test cases in other workspaces that exceed their...

4.3CVSS6.7AI score0.00296EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/30 12:00 a.m.7 views

PT-2024-40511 · Packagist · Typo3/Cms-Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, so: Software affected versions not specified Description: A security issue allows backend users without read access to specific pages to still view them in the page tree, which should be disallowed...

4.3CVSS6.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/05/30 12:00 a.m.16 views

PT-2024-26458 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Master.php?f=view item. Manipulating the argument id can result in SQL injection...

9.8CVSS7.4AI score0.00429EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/30 12:00 a.m.12 views

Torchbox Wagtail Security Breach

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Torchbox Wagtail versions prior to 6.0.5 and prior to 6.1.2, which stems from an improperly applied permission check in the wagtail.contrib.settings module, which can be exploited...

5.5CVSS6.7AI score0.00332EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/30 12:00 a.m.6 views

Dino Physics School Assistant SQL注入漏洞

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which originates from unrecognized code in /admin/page=borrow/viewborrow, which leads to SQL injection via the parameter id...

9.8CVSS8.1AI score0.00531EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/05/30 12:00 a.m.10 views

PT-2024-26449 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file "/admin/?page=borrow/view borrow". Manipulating the argument id can result in SQL injection...

9.8CVSS7.3AI score0.00531EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/30 12:00 a.m.9 views

PT-2024-26457 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Master.php?f=view category. Manipulating the id argument can result in SQL injection...

6.5CVSS7.4AI score0.00407EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2024/05/29 6:40 p.m.45 views

Nautobot dynamic-group-members doesn't enforce permission restrictions on member objects

Impact What kind of vulnerability is it? Who is impacted? A user with permissions to view Dynamic Group records extras.viewdynamicgroup permission can use the Dynamic Group detail UI view /extras/dynamic-groups// and/or the members REST API view /api/extras/dynamic-groups//members/ to list the...

6.5CVSS6.5AI score0.00398EPSS
SaveExploits0References8Affected Software1
Fedora
Fedora
added 2024/05/29 3:37 a.m.27 views

[SECURITY] Fedora 40 Update: qt6-qtcharts-6.7.1-1.fc40

Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...

9.8CVSS6.6AI score0.0097EPSS
SaveExploits0
Rows per page
Query Builder