344 matches found
SUSE CVE-2021-1234
A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the vManage software must be in cluster mode. This vulnerability is due t...
Exclusive Addons for Elementor 2.6.9 - Stored Cross-Site Scripting (XSS)
Exploit Title: Exclusive Addons for Elementor ≤ 2.6.9 - Authenticated Stored Cross-Site Scripting XSS Original Author: Wordfence Security Team Exploit Author: Al Baradi Joy Exploit Date: March 13, 2024 Vendor Homepage: https://exclusiveaddons.com/ Software Link:...
Linux Distros Unpatched Vulnerability : CVE-2016-1234
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the glob implementation in GNU C Library aka glibc before 2.24, when GLOBALTDIRFUNC is used, allows context-dependent attackers t...
CVE-2025-1234
creationtimestamp| type| source ---|---|--- 2025-02-22 13:06:31+00:00| seen| https://gist.github.com/scasella/8223c623abddc256fe3978f2c443599d 2025-03-07 08:47:40+00:00| seen| https://bsky.app/profile/calebpr.bsky.social/post/3ljrmqg3ddd22 2025-03-08 21:20:13+00:00| seen|...
CVE-2022-1234
XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device...
CVE-2021-1234
creationtimestamp| type| source ---|---|--- 2024-11-18 15:52:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113504757865674846 2025-04-10 03:33:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmgkzglhv22h 2025-09-01 17:58:46+00:00| seen|...
CVE-2021-1234
Affected product/edition: Cisco SD-WAN vManage Software (cluster mode)\nVulnerability summary: In the cluster management interface, there is an absence of authentication for sensitive information, allowing an unauthenticated, remote attacker to view sensitive data by sending a crafted request.\nR...
CVE-2022-1234
creationtimestamp| type| source ---|---|--- 2024-10-03 20:48:05+00:00| seen| https://t.me/cvedetector/6921 2025-02-11 06:14:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhuyyo33ch22 2025-02-11 06:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhuyyp3p6e2m...
FreeBSD : frr - BGP (802961eb-7a89-11ef-bdd7-a0423f48a938)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 802961eb-7a89-11ef-bdd7-a0423f48a938 advisory. [email protected] reports: An issue was discovered in FRRouting FRR. bgpattrencap in bgpd/bgpattr.c does no...
CVE-2024-45508
HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...
mdict.kekenet.com Cross Site Scripting vulnerability OBB-3929157
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-1234
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor acce...
CVE-2024-1234
CVE-2024-1234 affects the WordPress plugin Exclusive Addons for Elementor (all versions up to 2.6.9). The root cause is insufficient input sanitization and output escaping in a data attribute (and related parameter handling), enabling a stored cross-site scripting (XSS) vulnerability. An attacker...
RHEL 8 : openvswitch2.17 (RHSA-2024:1234)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1234 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...
WordPress Exclusive Addons Elementor Plugin <= 2.6.9 is vulnerable to Cross Site Scripting (XSS)
Software Exclusive Addons Elementor Type Plugin Vulnerable versions = 2.6.9 Fixed in 2.6.9.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1234 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID eec3f461cc61 Credits Webbernaut...
CVE-2019-1234
creationtimestamp| type| source ---|---|--- 2024-02-11 14:36:29+00:00| seen| https://t.me/ctinow/182791...
CVE-2023-1234
creationtimestamp| type| source ---|---|--- 2023-12-11 07:54:33+00:00| seen| https://t.me/arpsyndicate/1717 2025-01-31 17:51:19+00:00| seen| https://gist.github.com/CarterOgunsola/8ef626effb6fa27887c6b571b9a0962e 2025-03-10 09:50:51+00:00| seen|...
CVE-1234-0007
No description is available for this CVE...
CVE-1234-1234
No description is available for this CVE...
Integer overflow
In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i...