Lucene search
+L

15801 matches found

CNNVD
CNNVD
added 2024/05/02 12:00 a.m.9 views

WordPress plugin Easy Restaurant Table Booking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS6.3AI score0.00272EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/02 12:00 a.m.8 views

The vulnerability of the Apache Answer Q&A platform, related to the lack of measures taken to protect the website structure, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Apache Answer Q&A platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

10CVSS5.2AI score0.00966EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/05/01 6:15 p.m.21 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

5.3CVSS6.7AI score0.0087EPSS
SaveExploits4References1
Cvelist
Cvelist
added 2024/05/01 12:00 a.m.55 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

6.9AI score0.0087EPSS
SaveExploits4References1
BDU FSTEC
BDU FSTEC
added 2024/05/01 12:00 a.m.11 views

The vulnerability of the update_form() function in the Admin Bar Editor plugin of the WordPress content management system allows a hacker to enable or disable the administrator panel on the website’s external interface.

The vulnerability of the updateform function in the Admin Bar Editor plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to enable or disable the administrator panel on the website’s...

4.3CVSS5.5AI score0.00431EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/01 12:00 a.m.33 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

7AI score0.0087EPSS
SaveExploits4References1
Positive Technologies
Positive Technologies
added 2024/05/01 12:00 a.m.7 views

PT-2024-24464 · Unknown · Lomag Warehouse Management

Name of the Vulnerable Software and Affected Versions: LoMag WareHouse Management application versions 1.0.20.120 and older Description: The issue allows weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed. Recommendations: For versions...

8.1CVSS7AI score0.0087EPSS
SaveExploits4References3
CVE
CVE
added 2024/05/01 12:00 a.m.94 views

CVE-2024-32213

The CVE-2024-32213 entry concerns the LoMag WareHouse Management application. Affected software: LoMag WareHouse Management v1.0.20.120 and older. Root cause: by default, the system allows hard-coded passwords of 10 characters with little or no complexity, enabling weak authentication. Impact: we...

5.3CVSS6.9AI score0.0087EPSS
SaveExploits4References1Affected Software1
CNNVD
CNNVD
added 2024/04/30 12:00 a.m.12 views

WordPress plugin Customer Email Verification for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

8.1CVSS7.2AI score0.0085EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/04/30 12:00 a.m.14 views

The vulnerability of the Campaign LOV component of the Oracle Marketing marketing platform, a part of the Oracle E-Business Suite, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Campaign LOV component of the Oracle Marketing marketing platform, a part of the Oracle E-Business Suite, involves insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

7.8CVSS7.2AI score0.0061EPSS
SaveExploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2024/04/30 12:00 a.m.15 views

PT-2024-25703 · Ipmi · Ipmi

Name of the Vulnerable Software and Affected Versions: IPMI affected versions not specified Description: The issue concerns implementations of IPMI Authenticated sessions that do not provide enough randomness, making them susceptible to session hijacking. An attacker can exploit this by using...

9.1CVSS7AI score0.00718EPSS
SaveExploits0References7
CNVD
CNVD
added 2024/04/30 12:00 a.m.14 views

Unspecified vulnerability in Tenda N300F3 (CNVD-2025-16317)

The Tenda N300F3 is Tenda's wireless router designed for small office and home office environments. A security vulnerability exists in the Tenda N300F3 that originates from allowing a user to bypass the intended security policy and create weak passwords. No detailed vulnerability details are...

9.1CVSS7.1AI score0.00522EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/26 8:15 p.m.30 views

CVE-2024-25343

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...

9.1CVSS6.5AI score0.00522EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.11 views

Tenda N300 安全漏洞

The Tenda N300F3 is Tenda's wireless router designed for small office and home office environments. A security vulnerability exists in the Tenda N300F3 that originates from allowing a user to bypass the intended security policy and create weak passwords. No detailed vulnerability details are...

9.1CVSS6.9AI score0.00522EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/04/26 12:00 a.m.22 views

CVE-2024-25343

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...

7.2AI score0.00522EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/26 12:00 a.m.102 views

CVE-2024-25343

The CVE-2024-25343 entry concerns the Tenda N300 F3 router. Affected product: Tenda N300 F3 router. Vulnerability: allows bypass of the intended security policy and enables creation of weak passwords. Root cause details are not provided in the connected documents beyond the high-severity impact (...

9.1CVSS6.8AI score0.00522EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/26 12:00 a.m.18 views

PT-2024-20893 · Tenda · Tenda N300 F3

Name of the Vulnerable Software and Affected Versions: Tenda N300 F3 router affected versions not specified Description: The issue allows users to bypass the intended security policy and create weak passwords. Recommendations: At the moment, there is no information about a newer version that...

9.1CVSS7AI score0.00522EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/04/26 12:00 a.m.50 views

CVE-2024-25343

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...

6.8AI score0.00522EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/25 12:00 a.m.12 views

Vulnerability of FortiOS operating systems and FortiProxy proxy servers in protecting against internet attacks, due to insufficient protection of registration data, allowing attackers to perform arbitrary actions.

The vulnerability of the FortiOS operating systems and the proxy server used for protecting against Internet attacks related to FortiProxy lies in the insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided...

7.6CVSS6.3AI score0.00753EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2024/04/22 12:00 a.m.13 views

Itel Vision 3 Turbo 安全漏洞

The Itel Vision 3 Turbo is a smartphone from Itel. A security vulnerability exists in the Itel Vision 3 Turbo that stems from the fact that certain software versions of the device contain a vulnerable pre-installed application com.transsion.autotest.factory with insufficient access control that...

6.1CVSS7.3AI score0.00172EPSS
SaveExploits0References3
Rows per page
Query Builder