Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:9 a.m.6 views

CVE-2024-13055

The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6.1AI score0.02205EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2017-13055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print- isoclns.c:isisprintisreachsubtlv. CVE-2017-13055 Note that Nessus relies on the...

9.8CVSS7AI score0.0136EPSS
Exploits0References2
NVD
NVD
added 2025/01/27 6:15 a.m.9 views

CVE-2024-13055

The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.02205EPSS
Exploits1References1
CVE
CVE
added 2025/01/27 6:0 a.m.51 views

CVE-2024-13055

CVE-2024-13055 affects the Dyn Business Panel WordPress plugin (versions

7.1CVSS5.8AI score0.02205EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2025/01/27 6:0 a.m.17 views

CVE-2024-13055 Dyn Business Panel <= 1.0.0 - Reflected XSS

The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.02205EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/01/27 6:0 a.m.7 views

CVE-2024-13055 Dyn Business Panel <= 1.0.0 - Reflected XSS

The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7AI score0.02205EPSS
Exploits1References1
CVE
CVE
added 2024/05/07 10:54 p.m.64 views

CVE-2021-34947

The CVE-2021-34947 entry describes a NETGEAR R7800 net-cgi Out-of-Bounds Write Remote Code Execution vulnerability. The flaw is in parsing of the soap_block_table, caused by insufficient validation of user-supplied data, allowing a write past the end of an allocated structure. This enables networ...

8.8CVSS9AI score0.00388EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/07 10:54 p.m.18 views

CVE-2021-34947 NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

8.8CVSS9.2AI score0.00388EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2022/05/20 11:43 p.m.24 views

CVE-2018-13055

A cross-site scripting XSS vulnerability in the View Filters page viewfilterspage.php in MantisBT 2.1.0 through 2.15.0 allows remote attackers to inject arbitrary code if CSP settings permit it through a crafted PATHINFO...

6.8CVSS4.6AI score0.00349EPSS
Exploits1References1
CVE
CVE
added 2022/01/14 4:24 p.m.29 views

CVE-2020-13055

CVE-2020-13055 is rejected/not used; this entry does not represent an active vulnerability.

6.7AI score
Exploits0
Cvelist
Cvelist
added 2022/01/14 4:24 p.m.12 views

CVE-2020-13055

...

Exploits0
OSV
OSV
added 2019/06/20 2:15 p.m.17 views

CVE-2018-16514

A cross-site scripting XSS vulnerability in the View Filters page viewfilterspage.php and Edit Filter page managefiltereditpage.php in MantisBT 2.1.0 through 2.17.0 allows remote attackers to inject arbitrary code if CSP settings permit it through a crafted PATHINFO. NOTE: this vulnerability exis...

4.7CVSS5.9AI score
Exploits0References1
Prion
Prion
added 2019/06/20 2:15 p.m.17 views

Cross site scripting

A cross-site scripting XSS vulnerability in the View Filters page viewfilterspage.php and Edit Filter page managefiltereditpage.php in MantisBT 2.1.0 through 2.17.0 allows remote attackers to inject arbitrary code if CSP settings permit it through a crafted PATHINFO. NOTE: this vulnerability exis...

2.6CVSS5.5AI score0.00349EPSS
Exploits2References1Affected Software1
Packet Storm
Packet Storm
added 2019/01/08 12:0 a.m.94 views

Mantis 2.11.1 Cross Site Scripting

Reflected Cross-site Scripting in Mantis 2.11.1 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting in Mantis 2.11.1 Affected Software: Mantis Affected Versions: 2.11.1 Homepage: https://www.mantisbt.org/ Vulnerability: Cross-site Scripting Severity: Mediu...

4.3CVSS5.5AI score0.00349EPSS
Exploits1
CVE
CVE
added 2018/08/03 6:0 p.m.52 views

CVE-2018-13055

CVE-2018-13055 family (MantisBT) : The cross‑site scripting flaw affects MantisBT 2.1.0–2.15.0 (and related advisories) via PATH_INFO on the View Filters page (view_filters_page.php) and related Edit Filter paths, caused by an incomplete fix for this issue. Connected entries reiterate the same XS...

6.1CVSS5.1AI score0.00349EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2017/09/14 6:29 a.m.19 views

CVE-2017-13055

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintisreachsubtlv...

9.8CVSS9.6AI score
Exploits0References7
Vulnrichment
Vulnrichment
added 2017/09/14 6:0 a.m.0 views

CVE-2017-13055

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintisreachsubtlv...

7.1AI score0.0136EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2017/09/12 12:0 a.m.40 views

Debian: Security Advisory (DSA-3971-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.10465EPSS
Exploits3References3
Rows per page
Query Builder