Lucene search
K

58 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:38 p.m.6 views

CVE-2023-29192

SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This has been fixed in version 1.2.19...

4.3CVSS6.9AI score0.00205EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.4 views

WordPress IRM Newsroom plugin <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmeventlist' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'irmeventlist' Shortcode vulnerability discovered by Chuck - None in WordPress Plugin IRM Newsroom versions = 1.2.19...

6.4CVSS5.9AI score0.00122EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-6250

Malicious code in bioql PyPI...

6.5CVSS6.1AI score0.00322EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-20743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to...

7.5CVSS7.1AI score0.07129EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 12:59 a.m.5 views

CVE-2022-2252

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

6.1CVSS6.7AI score0.00174EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:25 p.m.5 views

CVE-2022-2280

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

6.5CVSS5.9AI score0.00322EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:54 p.m.12 views

CVE-2022-2300

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

6.3CVSS5.9AI score0.00181EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.3 views

WordPress plugin ShipDepot for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS6AI score0.00114EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/28 12:0 a.m.1 views

WordPress plugin Booking for Appointments and Events Calendar Amelia 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

5.3CVSS8.2AI score0.00299EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/03/27 9:19 p.m.2 views

WordPress Booking for Appointments and Events Calendar – Amelia plugin <= 1.2.19 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by zhuxuan wu in WordPress Plugin Amelia versions = 1.2.19...

5.3CVSS7AI score0.00299EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/06 12:0 a.m.11 views

WordPress Email Subscription Popup Plugin <= 1.2.18 is vulnerable to Cross Site Scripting (XSS)

Software Email Subscription Popup Type Plugin Vulnerable versions = 1.2.18 Fixed in 1.2.19 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6527 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 85e40131e875 Credits 0x9567b...

6.1CVSS5.6AI score0.0071EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/08/24 2:25 a.m.1 views

SUSE CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

5.3CVSS7.2AI score0.00068EPSS
Exploits1References3
OSV
OSV
added 2023/08/22 7:16 p.m.1 views

DEBIAN-CVE-2022-48538

In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cactildapauth allows a zero as the password...

5.3CVSS5.7AI score0.00068EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.1 views

Cacti 跨站脚本漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data through snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A cross-site scripting vulnerability exists in Cacti version 1.2.19,...

5.3CVSS5.3AI score0.00068EPSS
Exploits1References3
OSV
OSV
added 2023/04/10 9:11 p.m.4 views

CVE-2023-29192 SilverwareGames.io users with access to the game upload panel are able to edit download links for games uploaded by other developers

SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This has been fixed in version 1.2.19...

2.7CVSS7AI score0.00205EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/04/10 9:11 p.m.8 views

CVE-2023-29192 SilverwareGames.io users with access to the game upload panel are able to edit download links for games uploaded by other developers

SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This has been fixed in version 1.2.19...

2.7CVSS6.9AI score0.00205EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.2 views

SilverwareGames.io 安全漏洞

Silverware Games SilverwareGames.io is an online game site from Silverware Games, Inc. A security vulnerability exists in SilverwareGames.io prior to version 1.2.19, which originated from a vulnerability that allows users to access the game upload panel and edit the download links of games upload...

4.3CVSS5AI score0.00205EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:23 a.m.1 views

SUSE CVE-2015-0225

The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request...

7.5CVSS9.8AI score0.00667EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:0 a.m.3 views

SUSE CVE-2016-5364

Cross-site scripting XSS vulnerability in managecustomfieldeditpage.php in MantisBT 1.2.19 and earlier allows remote attackers to inject arbitrary web script or HTML via the return parameter...

6.1CVSS6AI score0.00297EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.1 views

SUSE CVE-2018-20743

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service daemon hang or crash via a message flood...

7.5CVSS7.3AI score0.07129EPSS
Exploits0References6
Rows per page
Query Builder