Lucene search
+L

3049 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•5 views

CVE-2024-4304: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability has been detected on GT3 Soluciones SWAL. This vulnerability consists in a reflected XSS in the Titular parameter inside Gestion 'Documental Seguimiento de Expedientes Alta de Expedientes'...

5.4CVSS5.7AI score0.00289EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2024/04/28 8:14 a.m.•20 views

outfits24.de Cross Site Scripting vulnerability OBB-3923831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/04/18 1:39 p.m.•23 views

tankreinigung24.de Cross Site Scripting vulnerability OBB-3918780

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2024/04/18 9:15 a.m.•38 views

CVE-2024-32591

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniele De Rosa Backend Designer allows Stored XSS.This issue affects Backend Designer: from n/a through 1.3...

5.9CVSS5.7AI score0.00338EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/18 8:41 a.m.•35 views

CVE-2024-32591 WordPress Backend Designer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniele De Rosa Backend Designer allows Stored XSS.This issue affects Backend Designer: from n/a through 1.3...

5.9CVSS5.9AI score0.00338EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/18 12:00 a.m.•6 views

CVE-2024-32591: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniele De Rosa Backend Designer allows Stored XSS.This issue affects Backend Designer: from n/a through 1.3...

5.9CVSS5.8AI score0.00338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/18 12:00 a.m.•5 views

PT-2024-24713

Name of the Vulnerable Software and Affected Versions Daniele De Rosa Backend Designer versions 1.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

5.9CVSS5.6AI score0.00338EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2024/04/16 12:00 a.m.•15 views

WordPress Tainacan Interface Theme <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Tainacan Interface Type Theme Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3867 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID dcbddfa32a84 Credits Matheus Nascimento de...

6.1CVSS5.8AI score0.00818EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/16 12:00 a.m.•2 views

PT-2024-8313

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds OOB error in the nilfs set de type function, which uses the nilfs type by mode array. The error occurs when the index is determined in a way that...

7.8CVSS5.8AI score0.00273EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/04/13 2:12 a.m.•6 views

SUSE CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8.2CVSS7.1AI score0.00396EPSS
SaveExploits1References3
NVD
NVD
•added 2024/04/12 10:15 a.m.•25 views

CVE-2024-31372

Cross-Site Request Forgery CSRF vulnerability in Arnan de Gans No-Bot Registration.This issue affects No-Bot Registration: from n/a through 1.9.1...

4.3CVSS4.6AI score0.002EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/12 9:27 a.m.•49 views

CVE-2024-31372

Technical details about CVE-2024-31372 are not provided in the supplied documents. It describes a CSRF vulnerability in No-Bot Registration plugin versions n/a–1.9.1; monitor for published advisories for remediation.

4.3CVSS5.1AI score0.002EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/12 6:15 a.m.•16 views

UBUNTU-CVE-2023-49528

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via the afdialoguenhance.c:261:5 in the destereo component...

8CVSS7.1AI score0.00396EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/12 12:00 a.m.•22 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version n6.1-3-g466799d4f5, which can be exploited by an attacker to execute arbitrary code and cause a denial of service DoS via...

8CVSS7.9AI score0.00396EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/12 12:00 a.m.•22 views

PT-2024-24018 · Unknown · Arnan De Gans No-Bot Registration

Name of the Vulnerable Software and Affected Versions: Arnan de Gans No-Bot Registration versions 1.9.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

4.3CVSS6.5AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/12 12:00 a.m.•12 views

PT-2024-4526

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow in the de stereo component of the FFmpeg library, specifically in the af dialoguenhance.c file. This allows a local attacker to execute arbitrary code an...

8CVSS7.3AI score0.01179EPSS
SaveExploits2References56
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/12 12:00 a.m.•3 views

CVE-2024-31372: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Arnan de Gans No-Bot Registration.This issue affects No-Bot Registration: from n/a through 1.9.1...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2024/04/11 5:00 p.m.•10 views

chains24.de Cross Site Scripting vulnerability OBB-3917217

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/04/11 10:28 a.m.•12 views

gmds-tmf-2021.de Cross Site Scripting vulnerability OBB-3915519

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/04/10 11:25 a.m.•17 views

le-pain-de-sucre.com Cross Site Scripting vulnerability OBB-3913876

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder