Lucene search
K

42 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 5:4 p.m.1 views

CVE-2026-25461

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Listeo Core: from n/a through = 2.0.21...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.1 views

EUVD-2026-15744

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Listeo Core: from n/a through = 2.0.21...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References2
NVD
NVD
added 2026/03/25 5:16 p.m.1 views

CVE-2026-25461

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Listeo Core: from n/a through = 2.0.21...

7.1CVSS0.00045EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

WordPress plugin Listeo Core 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.1CVSS5.6AI score0.00045EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-6491

Malware in sbrugna...

6CVSS6.2AI score0.00729EPSS
Exploits0References6
OSV
OSV
added 2025/05/09 12:0 a.m.1 views

OPENSUSE-SU-2025:15074-1 libmosquitto1-2.0.21-2.1 on GA media

These are all security issues fixed in the libmosquitto1-2.0.21-2.1 package on the GA media of openSUSE Tumbleweed...

6.5CVSS5.8AI score0.00385EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.1 views

WordPress plugin Market Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

5.4CVSS8.8AI score0.00082EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/02/23 9:7 p.m.1 views

WordPress Market Exporter plugin <= 2.0.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Market Exporter versions = 2.0.21...

5.4CVSS7AI score0.00082EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 12:17 p.m.2 views

CVE-2024-52495

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows SQL Injection.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.23...

8.5CVSS7.3AI score0.00238EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/03 1:2 p.m.2 views

WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Distance Based Shipping Calculator versions = 2.0.21...

7.1CVSS6.1AI score0.00115EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.2 views

PT-2024-37644 · Tradedoubler · The Grow By Tradedoubler

Name of the Vulnerable Software and Affected Versions: The Grow by Tradedoubler WordPress plugin versions 2.0.21 and earlier Description: The issue allows attackers to include and execute PHP files on the server via the component parameter, enabling the execution of any PHP code in those files...

9.8CVSS7.3AI score0.91218EPSS
Exploits1References6
OSV
OSV
added 2024/03/09 12:45 a.m.2 views

CVE-2024-28122 JWX vulnerable to a denial of service attack using compressed JWE message

JWX is Go module implementing various JWx JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE technologies. This vulnerability allows an attacker with a trusted public key to cause a Denial-of-Service DoS condition by crafting a malicious JSON Web Encryption JWE token with an exceptionally high...

6.8CVSS6.4AI score0.0015EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.1 views

PT-2024-2212

Name of the Vulnerable Software and Affected Versions jwx versions prior to 1.2.29 jwx versions prior to 2.0.21 Description This issue allows an attacker with a trusted public key to cause a Denial-of-Service DoS condition by crafting a malicious JSON Web Encryption JWE token with an exceptionall...

6.8CVSS6.7AI score0.0015EPSS
Exploits1References18
Positive Technologies
Positive Technologies
added 2023/08/17 12:0 a.m.1 views

PT-2023-26703 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: Froxlor version 2.0.21 Description: Our research team found a zeroday issue in Froxlor. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was...

6.7AI score
Exploits0References3
NVD
NVD
added 2023/07/14 1:15 a.m.12 views

CVE-2023-3668

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS0.00105EPSS
Exploits1References2
Prion
Prion
added 2023/07/14 1:15 a.m.10 views

Input validation

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

5.8CVSS7AI score0.00105EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/14 12:0 a.m.9 views

CVE-2023-3668 Improper Encoding or Escaping of Output in froxlor/froxlor

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS6.8AI score0.00105EPSS
Exploits1References2
OSV
OSV
added 2023/07/14 12:0 a.m.11 views

CVE-2023-3668 Improper Encoding or Escaping of Output in froxlor/froxlor

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

9.1CVSS8.2AI score0.00105EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/07/14 12:0 a.m.2 views

Froxlor 安全漏洞

Froxlor is a set of lightweight server management software from the Froxlor team. A command execution vulnerability exists in versions prior to froxlor 2.0.21 that stems from an output encoding or escaping error. An attacker can exploit the vulnerability to cause command execution...

9.1CVSS7.2AI score0.00105EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.1 views

PT-2022-9175 · Unknown +3 · Kexec-Tools +3

Name of the Vulnerable Software and Affected Versions: kexec-tools versions prior to 2.0.21-8 kexec-tools versions prior to 2.0.20-47 Description: A flaw was found in the permissions of a log file created by kexec-tools, allowing a local unprivileged user to read this file and leak kernel interna...

5.5CVSS4.4AI score0.00025EPSS
Exploits0References13
Rows per page
Query Builder