Lucene search
+L

10889 matches found

Patchstack
Patchstack
added 2024/02/21 12:00 a.m.16 views

WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.15.3 is vulnerable to Cross Site Scripting (XSS)

Software 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Type Plugin Vulnerable versions = 1.15.3 Fixed in 1.15.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1081 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID...

6.4CVSS6AI score0.0032EPSS
SaveExploits0References3Affected Software1
WPVulnDB
WPVulnDB
added 2024/02/20 12:00 a.m.24 views

Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure

Description The plugin contains a vulnerability that allows you to read and download PHP logs without authorization PoC 1 Admin should click on "Save as TXT file" in http://yoursite/wordpress/wp-admin/admin.php?page=rrrlgvwr-monitor.php 2 Then someone else can go to...

8.6AI score0.00587EPSS
SaveExploits2References1Affected Software1
wpexploit
wpexploit
added 2024/02/20 12:00 a.m.141 views

Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure

Description The plugin contains a vulnerability that allows you to read and download PHP logs without authorization 1 Admin should click on "Save as TXT file" in http://yoursite/wordpress/wp-admin/admin.php?page=rrrlgvwr-monitor.php 2 Then someone else can go to...

8.7AI score0.00587EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.15 views

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, related to integer overflow, allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud are related to numerical overflow vulnerabilities. Exploiting these vulnerabilities can allow attackers to execute arbitrary code using a specially created malicious...

7.8CVSS8AI score0.04448EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/02/15 12:00 a.m.23 views

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information caused by an out-of-bounds read...

5.5CVSS6.3AI score0.02336EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/02/15 12:00 a.m.13 views

The vulnerability of the XRef::fetch() function in PDF viewing software, Xpdf, allows a malicious actor to cause an unexpected termination of the application.

The vulnerability of the XRef::fetch function xpdf/XRef.cc in PDF viewing software like Xpdf is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause the application to terminate abnormally...

5.5CVSS6.9AI score0.0038EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:00 a.m.15 views

The vulnerability of the AcroForm::scanField function in PDF viewing software like Xpdf allows a hacker to trigger a service failure.

The vulnerability of the AcroForm::scanField function AcroForm.cc in the PDF viewing software Xpdf involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00898EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:00 a.m.14 views

The vulnerability of the xwiki-platform-office-viewer component of the XWiki Platform, a platform for creating collaborative web applications. This component allows attackers to view the content of files on the hosting server.

The vulnerability of the xwiki-platform-office-viewer component of the XWiki Platform, a platform for creating collaborative web applications, relates to the disclosure of protected information. Exploiting this vulnerability could allow an attacker to remotely access and view the content of files...

7.8CVSS7.2AI score0.0101EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2024/02/12 9:15 a.m.14 views

CVE-2024-24935

Cross-Site Request Forgery CSRF vulnerability in WpSimpleTools Basic Log Viewer.This issue affects Basic Log Viewer: from n/a through 1.0.4...

8.8CVSS7.3AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/12 9:15 a.m.33 views

CVE-2024-24935

Cross-Site Request Forgery CSRF vulnerability in WpSimpleTools Basic Log Viewer.This issue affects Basic Log Viewer: from n/a through 1.0.4...

8.8CVSS4.6AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/12 9:15 a.m.25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WpSimpleTools Basic Log Viewer.This issue affects Basic Log Viewer: from n/a through 1.0.4...

4.3CVSS7.2AI score0.00214EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/12 8:34 a.m.14 views

CVE-2024-24935 WordPress Basic Log Viewer Plugin <= 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WpSimpleTools Basic Log Viewer.This issue affects Basic Log Viewer: from n/a through 1.0.4...

4.3CVSS7AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/12 8:34 a.m.65 views

CVE-2024-24935

CVE-2024-24935 is a CSRF vulnerability in the WordPress plugin WpSimpleTools Basic Log Viewer (Basic Log Viewer). Affected version range is up to and including 1.0.4 . The CVE entry notes a CSRF risk that could enable unauthorized actions, but the provided connected documents indicate the vulnera...

8.8CVSS6.3AI score0.00214EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/12 8:34 a.m.44 views

CVE-2024-24935 WordPress Basic Log Viewer Plugin <= 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WpSimpleTools Basic Log Viewer.This issue affects Basic Log Viewer: from n/a through 1.0.4...

4.3CVSS5AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/12 12:00 a.m.12 views

WordPress Plugin Basic Log Viewer Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

8.8CVSS6.6AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/12 12:00 a.m.12 views

PT-2024-20673 · Unknown · Wpsimpletools Basic Log Viewer

Name of the Vulnerable Software and Affected Versions: WpSimpleTools Basic Log Viewer versions 1.0.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Basic Log Viewer, allowing unauthorized actions to be performed. Recommendations: For versions 1.0.4 and earlier, updat...

8.8CVSS9.4AI score0.00214EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/02/12 12:00 a.m.15 views

WordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

Software TNC PDF viewer Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.9.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25097 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 29d45cd3f947 Credits Ngô Thiên An ancorn from VNPT-VCI...

6.5CVSS6.5AI score0.00419EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2024/02/12 12:00 a.m.17 views

Basic Log Viewer <= 1.0.4 - Cross-Site Request Forgery via wpst_lw_viewer

Description The Basic Log Viewer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the 'wpstlwviewer' function. This makes it possible for unauthenticated attackers to erase error logs...

4.3CVSS6.6AI score0.00214EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/02/10 12:00 a.m.35 views

Fedora: Security Advisory for atril (FEDORA-2024-59a7d96d84)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS8.8AI score0.02359EPSS
SaveExploits2References2
Fedora
Fedora
added 2024/02/09 1:52 a.m.44 views

[SECURITY] Fedora 38 Update: atril-1.26.2-2.fc38

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

9.6CVSS9.1AI score0.02359EPSS
SaveExploits2
Rows per page
Query Builder