Lucene search
+L

9078 matches found

Redos
Redos
added 2024/09/23 12:0 a.m.45 views

ROS-20240923-02

Vulnerability of ANGLE library in Mozilla Firefox, Firefox ESR and Thunderbird email client browsers is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

8.8CVSS9.8AI score0.02155EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2024/09/19 12:0 a.m.13 views

PT-2024-6333 · Rockwell Automation · Rslogix 5

Name of the Vulnerable Software and Affected Versions: Rockwell Automation RSLogix 5 affected versions not specified Description: A feature in the affected products enables users to prepare a project file with an embedded VBA script and can be configured to run once the project file has been open...

8.8CVSS7.7AI score0.00185EPSS
SaveExploits0References12
OSV
OSV
added 2024/09/17 6:15 a.m.8 views

CVE-2024-8047

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits1References1
NVD
NVD
added 2024/09/17 6:15 a.m.29 views

CVE-2024-8047

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00216EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/09/17 6:0 a.m.13 views

CVE-2024-8047 Visual Sound (old) <= 1.06 - Settings Update via CSRF

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

5.5AI score0.00216EPSS
SaveExploits1References1
CVE
CVE
added 2024/09/17 6:0 a.m.63 views

CVE-2024-8047

The Visual Sound (old) WordPress plugin, v1.06 and earlier, is disclosed as lacking CSRF protection when updating settings. This enables CSRF-based changes by an attacker with a logged‑in admin account. The exact patch version is not provided in the supplied documents; remediation is to upgrade t...

6.5CVSS6.6AI score0.00216EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/09/17 6:0 a.m.36 views

CVE-2024-8047 Visual Sound (old) <= 1.06 - Settings Update via CSRF

The Visual Sound old WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00216EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/09/17 12:0 a.m.22 views

WordPress plugin Visual Sound 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS6.7AI score0.00216EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/09/16 12:0 a.m.14 views

PT-2024-38773 · WordPress · Visual Sound

Name of the Vulnerable Software and Affected Versions: The Visual Sound old WordPress plugin versions 1.06 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF...

6.5CVSS6.3AI score0.00216EPSS
SaveExploits1References8
Patchstack
Patchstack
added 2024/09/12 10:40 a.m.7 views

WordPress Visual Sound plugin <= 1.03 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Visual Sound versions = 1.03...

6.5CVSS7AI score0.00239EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2024/09/12 6:15 a.m.9 views

CVE-2024-7859

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits1References1
NVD
NVD
added 2024/09/12 6:15 a.m.22 views

CVE-2024-7859

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00239EPSS
SaveExploits1References1
CVE
CVE
added 2024/09/12 6:0 a.m.57 views

CVE-2024-7859

The CVE-2024-7859 entry affects the Visual Sound WordPress plugin (versions

6.5CVSS6.3AI score0.00239EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/09/12 6:0 a.m.27 views

CVE-2024-7859 Visual Sound <= 1.03 - Settings Update via CSRF

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

0.00239EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/09/12 6:0 a.m.13 views

CVE-2024-7859 Visual Sound <= 1.03 - Settings Update via CSRF

The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.8AI score0.00239EPSS
SaveExploits1References1
Fedora
Fedora
added 2024/09/12 1:35 a.m.22 views

[SECURITY] Fedora 39 Update: vim-9.1.719-1.fc39

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

5.5CVSS6.9AI score0.00352EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/09/12 12:0 a.m.5 views

WordPress plugin Visual Sound 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.5AI score0.00239EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2024/09/12 12:0 a.m.14 views

WordPress Visual Sound Plugin <= 1.03 is vulnerable to Cross Site Request Forgery (CSRF)

Software Visual Sound Type Plugin Vulnerable versions = 1.03 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-7859 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9af6354dfaf3 Credits Daniel Ruf Required...

6.5CVSS6.7AI score0.00239EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/11 12:0 a.m.13 views

PT-2024-38636 · WordPress · The Visual Sound

Name of the Vulnerable Software and Affected Versions: The Visual Sound WordPress plugin versions 1.03 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF attac...

6.5CVSS7AI score0.00239EPSS
SaveExploits1References6
The Hacker News
The Hacker News
added 2024/09/09 12:16 p.m.43 views

Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks

The China-linked advanced persistent threat APT group known as Mustang Panda has been observed weaponizing Visual Studio Code software as part of espionage operations targeting government entities in Southeast Asia. "This threat actor used Visual Studio Code's embedded reverse shell feature to ga...

8.6CVSS9.1AI score0.99978EPSS
SaveExploits53
Rows per page
Query Builder