Lucene search
K

85 matches found

EUVD
EUVD
added 2026/01/09 11:15 a.m.2 views

EUVD-2026-1742

The PullQuote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pullquote' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS4.7AI score0.00016EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 10:1 a.m.6 views

CVE-2024-1742

Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...

3.8CVSS6.6AI score0.00139EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:53 p.m.4 views

CVE-2021-1742

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS6.6AI score0.00395EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/01 5:21 p.m.4 views

CVE-2025-1742

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument pagename leads to cross site scripting. The attack may be launched remotely. The exploit has...

5.3CVSS6.2AI score0.00181EPSS
Exploits1References1
Circl
Circl
added 2025/02/27 5:25 p.m.2 views

CVE-2025-1742

creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5723 2025-02-27 19:15:36+00:00| seen| https://t.me/cvedetector/19047 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

6.1CVSS4.5AI score0.00181EPSS
Exploits1References2
NVD
NVD
added 2025/02/27 5:15 p.m.6 views

CVE-2025-1742

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument pagename leads to cross site scripting. The attack may be launched remotely. The exploit has...

6.1CVSS0.00181EPSS
Exploits1References4
CVE
CVE
added 2025/02/27 5:0 p.m.36 views

CVE-2025-1742

CVE-2025-1742 affects pihome-shc PiHome 2.0. The vulnerability resides in unknown functionality of /home.php, where manipulating the page_name argument results in cross-site scripting. It is described as exploitable remotely and with public disclosure of the exploit. Connected sources corroborate...

6.1CVSS4.3AI score0.00181EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/27 5:0 p.m.8 views

CVE-2025-1742 pihome-shc PiHome home.php cross site scripting

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument pagename leads to cross site scripting. The attack may be launched remotely. The exploit has...

5.3CVSS4.3AI score0.00181EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/02/27 5:0 p.m.13 views

CVE-2025-1742 pihome-shc PiHome home.php cross site scripting

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument pagename leads to cross site scripting. The attack may be launched remotely. The exploit has...

5.3CVSS0.00181EPSS
Exploits1References4
NVD
NVD
added 2024/03/22 11:15 a.m.8 views

CVE-2024-1742

Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...

3.8CVSS4.2AI score0.00139EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/03/22 11:15 a.m.7 views

CVE-2024-1742

Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...

3.8CVSS5.8AI score0.00139EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/22 10:26 a.m.13 views

CVE-2024-1742 Information disclosure in mk_oracle Checkmk agent plugin

Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...

3.8CVSS4.5AI score0.00139EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/22 10:26 a.m.24 views

CVE-2024-1742 Information disclosure in mk_oracle Checkmk agent plugin

Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...

3.8CVSS6.9AI score0.00139EPSS
Exploits0References1
CVE
CVE
added 2024/03/22 10:26 a.m.69 views

CVE-2024-1742

Summary: CVE-2024-1742 concerns the mk_oracle Checkmk agent plugin exposing sensitive information by invoking sqlplus on the command line, allowing leakage from the process list. What is affected: Checkmk agent plugins mk_oracle prior to versions: 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41, and 2.0.0 (EO...

3.8CVSS4.3AI score0.00139EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2024/03/22 12:0 a.m.13 views

Checkmk < 2.1.0p41, 2.2.x < 2.2.0p24 Information Disclosure Vulnerability

Checkmk is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...

3.8CVSS4.5AI score0.00139EPSS
Exploits0References1
OSV
OSV
added 2023/08/15 5:15 p.m.12 views

CVE-2023-38850

Buffer Overflow vulnerability in Michaelrsweet codedoc v.3.7 allows an attacker to cause a denial of service via the codedoc.c:1742 comppnent...

5.5CVSS6.7AI score
Exploits0References1
Cvelist
Cvelist
added 2023/08/15 12:0 a.m.11 views

CVE-2023-38850

Buffer Overflow vulnerability in Michaelrsweet codedoc v.3.7 allows an attacker to cause a denial of service via the codedoc.c:1742 comppnent...

5.7AI score0.00031EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/08/15 12:0 a.m.2 views

Codedoc Security Vulnerabilities

Codedoc is a documentation generator for C/C ++ code. Michaelrsweet A security vulnerability exists in codedoc version v.3.7, which stems from the presence of a buffer overflow vulnerability that allows attackers to cause a denial of service via the codedoc.c:1742 component...

5.5CVSS7AI score0.00031EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/04/12 12:0 a.m.35 views

RHEL 8 : nodejs:14 (RHSA-2023:1742)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1742 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

9.8CVSS7.7AI score0.03694EPSS
Exploits11References36
Circl
Circl
added 2023/03/31 2:21 a.m.1 views

CVE-2023-1742

creationtimestamp| type| source ---|---|--- 2023-03-31 02:21:44+00:00| seen| https://t.me/cibsecurity/61225...

8.8CVSS6.9AI score0.00346EPSS
Exploits1References1
Rows per page
Query Builder