Lucene search
K

37 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:8 p.m.0 views

CVE-2026-2569

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6AI score0.00043EPSS
Exploits0References1
NVD
NVD
added 2026/03/11 12:16 a.m.1 views

CVE-2026-2569

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00043EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/10 11:21 p.m.1 views

CVE-2026-2569

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.9AI score0.00043EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/10 11:21 p.m.0 views

CVE-2026-2569 Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.9AI score0.00043EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.0 views

PT-2026-24506

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.9AI score0.00043EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-3895

Malware in sbrugna...

6.5CVSS6.6AI score0.00117EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2003-0183

Malware in sbrugna...

5CVSS6.4AI score0.00655EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-29962

Malicious code in bioql PyPI...

7.8CVSS6.8AI score0.00271EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/06/08 1:19 p.m.3 views

CVE-2025-30956

Cross-Site Request Forgery CSRF vulnerability in Booqable Rental Software Booqable Rental booqable-rental-reservations allows Cross Site Request Forgery.This issue affects Booqable Rental: from n/a through = 2.4.25...

4.3CVSS5.9AI score0.00084EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 1:15 p.m.2 views

CVE-2025-30956

Cross-Site Request Forgery CSRF vulnerability in Booqable Rental Software Booqable Rental booqable-rental-reservations allows Cross Site Request Forgery.This issue affects Booqable Rental: from n/a through = 2.4.25...

4.3CVSS0.00084EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 12:54 p.m.36 views

CVE-2025-30956

CVE-2025-30956 is a CSRF vulnerability in the Booqable Rental Plugin for WordPress (affected: up to 2.4.20). According to the cited metrics, the issue allows Cross-Site Request Forgery with no privileges required, but requires user interaction, and has low integrity impact (I:L) with no confident...

4.3CVSS5.9AI score0.00084EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.1 views

PT-2025-24177 · Unknown · Booqable Rental

Name of the Vulnerable Software and Affected Versions: Booqable Rental versions through 2.4.20 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user into...

4.3CVSS4.4AI score0.00084EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.1 views

WordPress plugin Booqable Rental 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

4.3CVSS4.9AI score0.00084EPSS
Exploits0References2
Prion
Prion
added 2022/06/02 6:15 p.m.7 views

Design/Logic Flaw

Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table. NOTE:...

4CVSS6.6AI score0.00528EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/02 5:34 p.m.9 views

CVE-2022-26944

Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table. NOTE:...

6.8AI score0.00528EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2021/05/18 2:25 p.m.1 views

httpd: mod_http2 concurrent pool usage

A flaw was found in Apache httpd in versions 2.4.20 to 2.4.43. Logging using the wrong pool by modhttp2 at debug/trace log level may lead to potential crashes and denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS6.6AI score0.2745EPSS
Exploits2References5
RedHat Linux
RedHat Linux
added 2020/12/01 12:6 p.m.1 views

httpd: mod_http2 concurrent pool usage

A flaw was found in Apache httpd in versions 2.4.20 to 2.4.43. Logging using the wrong pool by modhttp2 at debug/trace log level may lead to potential crashes and denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS6.8AI score0.2745EPSS
Exploits2References5
CNVD
CNVD
added 2020/08/11 12:0 a.m.12 views

Apache HTTP Server Environment Issues Vulnerabilities

Apache HTTP Server is the United States Apache Software Apache Software Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A security vulnerability exists in Apache HTTP Server versions 2.4.20 through 2.4.43, which can be exploited by ...

7.5CVSS8.4AI score0.76276EPSS
Exploits0References1
CNVD
CNVD
added 2020/08/11 12:0 a.m.14 views

Apache HTTP Server Environment Issue Vulnerability (CNVD-2020-46279)

Apache HTTP Server is the United States Apache Software Apache Software Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An environmental issue vulnerability exists in Apache HTTP Server versions 2.4.20 through 2.4.43. An attacker...

7.5CVSS7.9AI score0.2745EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2020/08/07 12:0 a.m.6 views

PT-2020-5444 · Apache +6 · Apache Http Server +6

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.20 through 2.4.43 Description: The issue is related to the implementation of the HTTP/2 mechanism in the Apache HTTP Server, which is associated with inconsistent interpretation of HTTP requests. This can allow...

9.8CVSS6.2AI score0.7629EPSS
Exploits4References130
Rows per page
Query Builder