Lucene search
+L

12457 matches found

CNNVD
CNNVD
added 2023/07/18 12:00 a.m.17 views

Fides 资源管理错误漏洞

Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A resource management error vulnerability exists in Fides versions 2.11.0 through 2.15.1, which is rooted in...

4.9CVSS5.3AI score0.00685EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/18 12:00 a.m.12 views

Fides 资源管理错误漏洞

Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A resource management error vulnerability exists in Fides versions 2.11.0 through 2.15.1, which stems from...

4.9CVSS5.3AI score0.00704EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2023/07/18 12:00 a.m.16 views

Recipe Maker For Your Food Blog from Zip Recipes < 8.0.8 - Cross-Site Request Forgery

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS8.7AI score0.00256EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/17 9:02 p.m.23 views

CVE-2023-37476 Zip slip in OpenRefine

OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution in the context of the OpenRefine process if a user can be convinced to import it. The vulnerability exists in all versions of...

5.5CVSS6.8AI score0.00625EPSS
SaveExploits0References4
OSV
OSV
added 2023/07/17 2:15 p.m.10 views

CVE-2023-35089

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.7 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/17 2:15 p.m.29 views

CVE-2023-35089

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.7 versions...

8.8CVSS0.00256EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/17 2:15 p.m.22 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.7 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/17 1:31 p.m.20 views

CVE-2023-35089 WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.7 versions...

4.3CVSS7.1AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/17 1:31 p.m.52 views

CVE-2023-35089

CVE-2023-35089 : CSRF vulnerability in the WordPress plugin “Recipe Maker For Your Food Blog from Zip Recipes”

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/17 1:31 p.m.34 views

CVE-2023-35089 WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.7 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/17 12:00 a.m.12 views

WordPress Plugin Recipe Maker For Your Food Blog from Zip Recipes 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Recipe Mak...

8.8CVSS7.8AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/17 12:00 a.m.10 views

PT-2023-5893 · Unknown +2 · Openrefine +2

Name of the Vulnerable Software and Affected Versions: OpenRefine versions prior to 3.7.4 Description: The issue is related to a Zip Slip vulnerability in OpenRefine, which can be exploited by a specially crafted malicious OpenRefine project tar file. This can lead to arbitrary code execution in...

9.8CVSS7.2AI score0.45473EPSS
SaveExploits8References52
Snyk
Snyk
added 2023/07/16 10:45 a.m.2 views

Directory Traversal

Overview rswag is a package for generating beautiful API documentation directly from rspec integration tests Affected versions of this package are vulnerable to Directory Traversal in api/middleware.rb, which is accessible via the rswag-api component. JSON and YAML other than the OpenAPI or Swagg...

7.5CVSS7.6AI score0.01271EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/13 2:15 a.m.8 views

CVE-2023-34129

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root...

8.8CVSS5.9AI score0.41155EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/13 2:15 a.m.31 views

CVE-2023-34129

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root...

8.8CVSS0.41155EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/13 2:15 a.m.31 views

Path traversal

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root...

6.5CVSS8.6AI score0.41155EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2023/07/13 1:03 a.m.16 views

CVE-2023-34129

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root...

6.9AI score0.41155EPSS
SaveExploits0References2
CVE
CVE
added 2023/07/13 1:03 a.m.173 views

CVE-2023-34129

CVE-2023-34129 describes a Zip Slip path traversal in SonicWall GMS and Analytics. An authenticated attacker can traverse the filesystem and write arbitrary files via the Web Service, potentially achieving root-level impact. Affected versions: SonicWall GMS 9.3.2-SP1 and earlier; Analytics 2.5.0....

8.8CVSS8.6AI score0.41155EPSS
SaveIn wildExploits0References2Affected Software2
Cvelist
Cvelist
added 2023/07/13 1:03 a.m.41 views

CVE-2023-34129

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root...

9.1AI score0.41155EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/13 12:00 a.m.10 views

SonicWALL Analytics和GMS 路径遍历漏洞

SonicWALL Analytics and SonicWALL GMS are both products of SonicWALL, Inc. of the U.S. SonicWALL Analytics is a high-performance management and reporting engine for the Web.SonicWALL GMS is a global management system. A powerful and intuitive solution for organizations, distributed enterprises an...

8.8CVSS8.2AI score0.41155EPSS
SaveExploits0References3
Rows per page
Query Builder