Lucene search
K

81 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:33 a.m.4 views

CVE-2024-0371

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'createview' function in all versions up to, and including, 3.2.2. This makes it possible for authenticated...

4.3CVSS6.3AI score0.00147EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:54 p.m.3 views

CVE-2020-0371

There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256...

9.4CVSS6.8AI score0.00123EPSS
Exploits0References1
Circl
Circl
added 2025/01/21 8:32 a.m.3 views

CVE-2025-0371

creationtimestamp| type| source ---|---|--- 2025-01-21 08:32:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113865413956449112 2025-01-21 09:01:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2377 2025-01-21 09:16:02+00:00| seen|...

6.4CVSS7.3AI score0.0008EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/01/21 8:21 a.m.8 views

CVE-2025-0371 Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS5.8AI score0.0008EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/21 8:21 a.m.16 views

CVE-2025-0371 Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS0.0008EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/24 12:0 a.m.29 views

Photon OS 3.0: Vim PHSA-2022-3.0-0371

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0371. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20375...

8.8CVSS8.3AI score0.0529EPSS
Exploits4References5
Tenable Nessus
Tenable Nessus
added 2024/07/24 12:0 a.m.15 views

Photon OS 3.0: Libxml2 PHSA-2022-3.0-0371

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0371. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS7.9AI score0.00074EPSS
Exploits0References2
Circl
Circl
added 2024/02/05 11:31 p.m.1 views

CVE-2024-0371

creationtimestamp| type| source ---|---|--- 2024-02-05 23:31:24+00:00| seen| https://t.me/ctinow/179594 2024-02-18 12:11:37+00:00| seen| https://t.me/ctinow/187224...

4.3CVSS6.2AI score0.00147EPSS
Exploits0References2
NVD
NVD
added 2024/02/05 10:16 p.m.13 views

CVE-2024-0371

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'createview' function in all versions up to, and including, 3.2.2. This makes it possible for authenticated...

4.3CVSS4.2AI score0.00147EPSS
Exploits0References2
CVE
CVE
added 2024/02/05 9:21 p.m.48 views

CVE-2024-0371

CVE-2024-0371 concerns the WordPress plugin Views for WPForms – Display & Edit WPForms Entries on your site frontend. The issue is a missing capability check in the create_view function, affecting all versions up to and including 3.2.2, enabling authenticated users with subscriber access and abov...

4.3CVSS5.2AI score0.00147EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/01/25 12:0 a.m.43 views

CentOS 7 : kpatch-patch (RHSA-2024:0371)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0371 advisory. - An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array...

7.8CVSS6.8AI score0.00014EPSS
Exploits1References2
Circl
Circl
added 2024/01/23 6:16 p.m.0 views

RHSA-2024:0371

creationtimestamp| type| source ---|---|--- 2024-01-23 18:16:45+00:00| seen| https://t.me/ctinow/172194...

4.8AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/01/23 5:30 p.m.41 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.8CVSS6.8AI score0.00014EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:0 a.m.23 views

GitLab 11.4 < 14.5.4 / 14.6 < 14.6.4 / 14.7 < 14.7.1 (CVE-2022-0371)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 before 14.6.4, all versions starting from 14.7 before 14.7.1. GitL...

4.3CVSS5.1AI score0.00282EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/02/21 8:50 a.m.5 views

CVE-2023-0371 EmbedSocial < 1.1.28 - Contributor+ Stored XSS

The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.3AI score0.00198EPSS
Exploits2References1
Cvelist
Cvelist
added 2023/02/21 8:50 a.m.10 views

CVE-2023-0371 EmbedSocial < 1.1.28 - Contributor+ Stored XSS

The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.5AI score0.00198EPSS
Exploits2References1
CVE
CVE
added 2023/02/21 8:50 a.m.53 views

CVE-2023-0371

CVE-2023-0371 affects the EmbedSocial WordPress plugin prior to version 1.1.28. The vulnerability stems from inadequate validation and escaping of shortcode attributes before output, enabling Stored XSS for users with the contributor role and above. Impact is stored cross-site scripting on pages/...

5.4CVSS5.5AI score0.00198EPSS
Exploits2References1Affected Software1
Patchstack
Patchstack
added 2023/01/31 12:0 a.m.5 views

WordPress EmbedSocial Plugin < 1.1.28 is vulnerable to Cross Site Scripting (XSS)

Software EmbedSocial Type Plugin Vulnerable versions 1.1.28 Fixed in 1.1.28 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0371 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 80b948605bdb Credits István Márton Required...

5.4CVSS5.6AI score0.00198EPSS
Exploits2References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/11/18 12:0 a.m.44 views

MariaDB 10.0.0 < 10.0.1 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.1 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

6.8CVSS7AI score0.66845EPSS
Exploits11References20
OpenVAS
OpenVAS
added 2022/04/11 12:0 a.m.15 views

GitLab < 14.5.4, 14.6.x < 14.6.4, 14.7.x < 14.7.1 Information Disclosure Vulnerability

GitLab is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

4.3CVSS4.7AI score0.00282EPSS
Exploits0References1
Rows per page
Query Builder