Lucene search
+L

3049 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/31 12:00 a.m.•9 views

CVE-2024-5418: Improper Neutralization of Input During Web Page Generation

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slitems' attribute within the plugin's De Product Tab & Slide widget in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS6AI score0.00321EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/16 9:16 p.m.•31 views

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

8.1AI score
SaveExploits0References4
NVD
NVD
•added 2024/05/16 9:16 p.m.•39 views

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

7.5CVSS6.3AI score0.00196EPSS
SaveExploits0References4
OSV
OSV
•added 2024/05/16 9:16 p.m.•13 views

UBUNTU-CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

7.5CVSS7.1AI score0.00196EPSS
SaveExploits0References24
UbuntuCve
UbuntuCve
•added 2024/05/16 9:16 p.m.•44 views

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

7.5CVSS6.9AI score0.00196EPSS
SaveExploits0References23
Cvelist
Cvelist
•added 2024/05/16 8:46 p.m.•61 views

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

7.5CVSS6.2AI score0.00196EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•2 views

CVE-2024-21823: Hardware Logic with Insecure De-Synchronization between Control and Data Channels

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

7.5CVSS5.8AI score0.00196EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2024/05/15 12:16 p.m.•12 views

gites-de-france-hautes-alpes.com Cross Site Scripting vulnerability OBB-3928007

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/05/13 4:07 p.m.•12 views

jeu-de-puzzle.net Cross Site Scripting vulnerability OBB-3927632

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CVE
CVE
•added 2024/05/13 1:07 a.m.•154 views

CVE-2024-29212

CVE-2024-29212 affects Veeam Service Provider Console (VSPC). Multiple connected sources confirm an unsafe deserialization in VSPC server communications between the management agent and components, enabling Remote Code Execution (RCE) under certain conditions. Affected versions are reportedly VSP...

9.9CVSS7.4AI score0.01551EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
•added 2024/05/10 1:02 p.m.•15 views

watchband24.de Cross Site Scripting vulnerability OBB-3927281

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2024/05/08 4:25 a.m.•526 views

Exploit for Code Injection in Vmware Spring_Cloud_Function

CVE-2022-22963 En las versiones 3.1.6, 3.2.2 y versiones anter...

9.8CVSS7.7AI score0.99938EPSS
SaveExploits37
Fedora
Fedora
•added 2024/05/05 2:02 a.m.•48 views

[SECURITY] Fedora 40 Update: gdcm-3.0.23-5.fc40

Grassroots DiCoM GDCM is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 huffman compression is not supported, RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It...

9.8CVSS7AI score0.01652EPSS
SaveExploits3
Fedora
Fedora
•added 2024/05/05 1:40 a.m.•37 views

[SECURITY] Fedora 38 Update: gdcm-3.0.21-4.fc38

Grassroots DiCoM GDCM is a C++ library for DICOM medical files. It supports ACR-NEMA version 1 and 2 huffman compression is not supported, RAW, JPEG, JPEG 2000, JPEG-LS, RLE and deflated transfer syntax. It comes with a super fast scanner implementation to quickly scan hundreds of DICOM files. It...

9.8CVSS7AI score0.01652EPSS
SaveExploits3
Openbugbounty
Openbugbounty
•added 2024/05/01 9:53 a.m.•19 views

vita34.de Cross Site Scripting vulnerability OBB-3925295

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2024/05/01 6:15 a.m.•15 views

CVE-2024-26979

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/04/29 4:51 p.m.•13 views

uitvaartwinkeldevlinder.nl Improper Access Control vulnerability OBB-3924857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
NVD
NVD
•added 2024/04/29 12:15 p.m.•31 views

CVE-2024-4304

A Cross-Site Scripting XSS vulnerability has been detected on GT3 Soluciones SWAL. This vulnerability consists in a reflected XSS in the Titular parameter inside Gestion 'Documental Seguimiento de Expedientes Alta de Expedientes'...

5.4CVSS5.2AI score0.00289EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/29 11:52 a.m.•19 views

CVE-2024-4304 Vulnerability on SWAL platform from GT3 Soluciones

A Cross-Site Scripting XSS vulnerability has been detected on GT3 Soluciones SWAL. This vulnerability consists in a reflected XSS in the Titular parameter inside Gestion 'Documental Seguimiento de Expedientes Alta de Expedientes'...

5.4CVSS5.7AI score0.00289EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/29 11:52 a.m.•39 views

CVE-2024-4304 Vulnerability on SWAL platform from GT3 Soluciones

A Cross-Site Scripting XSS vulnerability has been detected on GT3 Soluciones SWAL. This vulnerability consists in a reflected XSS in the Titular parameter inside Gestion 'Documental Seguimiento de Expedientes Alta de Expedientes'...

5.4CVSS5.3AI score0.00289EPSS
SaveExploits0References1
Rows per page
Query Builder