Lucene search
+L

83 matches found

Cvelist
Cvelist
added 2023/03/27 3:37 p.m.33 views

CVE-2023-0660 Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS

The Smart Slider 3 WordPress plugin before 3.5.1.14 does not properly validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

5.5AI score0.00478EPSS
Exploits2References1
CVE
CVE
added 2023/03/27 3:37 p.m.83 views

CVE-2023-0660

The Smart Slider 3 WordPress plugin is affected by a Stored Cross-Site Scripting (XSS) vulnerability in versions prior to 3.5.1.14. The issue stems from improper validation and escaping of certain shortcode attributes before output in pages/posts where the shortcode is embedded, enabling users wi...

5.4CVSS5.2AI score0.00478EPSS
Exploits2References1Affected Software1
Circl
Circl
added 2022/02/18 2:38 p.m.7 views

CVE-2022-0660

creationtimestamp| type| source ---|---|--- 2022-02-18 14:38:06+00:00| seen| https://t.me/cibsecurity/37691...

9.4CVSS8.4AI score0.06923EPSS
Exploits1References1
NVD
NVD
added 2022/02/18 11:15 a.m.21 views

CVE-2022-0660

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

9.4CVSS0.06923EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/02/18 11:10 a.m.33 views

CVE-2022-0660 Generation of Error Message Containing Sensitive Information in microweber/microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

9.4CVSS7.7AI score0.06923EPSS
Exploits1References2
CVE
CVE
added 2022/02/18 11:10 a.m.150 views

CVE-2022-0660

Microweber before 1.2.11 is affected by an information-disclosure vulnerability in microweber/microweber. An error message generated when viewing load_module:comments#search exposes sensitive information, potentially enabling an attacker to obtain sensitive data and, per the nuclei template, poss...

9.4CVSS7.5AI score0.06923EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/02/18 11:10 a.m.25 views

CVE-2022-0660 Generation of Error Message Containing Sensitive Information in microweber/microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

9.4CVSS8.5AI score0.06923EPSS
Exploits1References4
Circl
Circl
added 2021/09/27 4:35 p.m.6 views

CVE-2021-0660

creationtimestamp| type| source ---|---|--- 2021-09-27 16:35:00+00:00| seen| https://t.me/cibsecurity/29460...

4.9CVSS5AI score0.0047EPSS
Exploits0References1
CVE
CVE
added 2021/09/27 11:21 a.m.38 views

CVE-2021-0660

The CVE-2021-0660 issue concerns the ccu component with an out-of-bounds read caused by incorrect error handling, enabling information disclosure potentially with System privileges. No user interaction is required. A patch is identified as ALPS05827145 (Issue ALPS05827145). RH and NVD entries cor...

4.9CVSS4.8AI score0.0047EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.32 views

SUSE: Security Advisory (SUSE-SU-2018:0660-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.6AI score0.74041EPSS
Exploits15References25
Tenable Nessus
Tenable Nessus
added 2021/02/24 12:0 a.m.31 views

RHEL 8 : firefox (RHSA-2021:0660)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0660 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

8.8CVSS7.6AI score0.0153EPSS
Exploits0References11
Openbugbounty
Openbugbounty
added 2020/06/28 7:43 a.m.12 views

serfides.org Cross Site Scripting vulnerability OBB-1208957

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
Exploits0
OpenVAS
OpenVAS
added 2020/02/12 12:0 a.m.74 views

Microsoft Windows Multiple Vulnerabilities (KB4537764)

This host is missing a critical security update according to Microsoft KB4537764 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
Exploits30References3
OpenVAS
OpenVAS
added 2020/02/12 12:0 a.m.56 views

Microsoft Windows Multiple Vulnerabilities (KB4532693)

This host is missing a critical security update according to Microsoft KB4532693 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
Exploits30References3
OpenVAS
OpenVAS
added 2020/02/12 12:0 a.m.53 views

Microsoft Windows Multiple Vulnerabilities (KB4537789)

This host is missing a critical security update according to Microsoft KB4537789 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.86863EPSS
Exploits30References3
NVD
NVD
added 2020/02/11 10:15 p.m.20 views

CVE-2020-0660

A denial of service vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol RDP Denial of Service Vulnerability'...

7.5CVSS7.8AI score0.0486EPSS
Exploits0References1
CVE
CVE
added 2020/02/11 9:22 p.m.92 views

CVE-2020-0660

CVE-2020-0660 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). According to the trusted sources, an attacker can trigger the issue by establishing an RDP connection and sending specially crafted requests, resulting in a disruption of availability. The public reco...

7.5CVSS7.6AI score0.0486EPSS
Exploits0References1Affected Software6
CVE
CVE
added 2019/03/06 12:0 a.m.144 views

CVE-2019-0660

Technical details for CVE-2019-0660 are not publicly available in the provided connected documents. Monitor for updates from advisories and CVE records to obtain affected products, impact, and remediation guidance.

6.5CVSS7.2AI score0.07708EPSS
Exploits0References2Affected Software8
Prion
Prion
added 2019/03/05 11:29 p.m.20 views

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664...

4.3CVSS6AI score0.07708EPSS
Exploits0References2Affected Software5
Circl
Circl
added 2019/02/13 2:35 p.m.9 views

CVE-2019-0660

creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...

6.5CVSS6.7AI score0.07708EPSS
Exploits0
Rows per page
Query Builder