Lucene search
+L

48 matches found

CNNVD
CNNVD
added 2024/03/05 12:00 a.m.11 views

WordPress Plugin SportsPress Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

5.3CVSS6.3AI score0.00427EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/10/25 2:53 p.m.77 views

Important: Red Hat Security Advisory: Red Hat support for Spring Boot 2.7.17 security update

An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.5CVSS7AI score0.99999EPSS
SaveExploits21References5
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.22 views

WordPress FooBox Image Lightbox plugin < 2.7.17 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress FooBox Image Lightbox plugin versions 2.7.17. Solution Update the WordPress FooBox Image Lightbox plugin to the latest available version at least 2.7.17...

3.2AI score
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/11/03 12:00 a.m.28 views

Python < 2.7.17, 3.x < 3.4.10, 3.5.x < 3.5.7, 3.6.x < 3.6.9, 3.7.x < 3.7.3 Cookie domain check returns incorrect results (bpo-35121) - Linux

Python is prone to an improper input validation vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

5.3CVSS6.7AI score0.0388EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/09/21 12:00 a.m.16 views

Python 2.7.x < 2.7.17, 3.5.x < 3.5.7, 3.6.x < 3.6.9, 3.7.x < 3.7.3 Information Disclosure Vulnerability (bpo-36216) - Windows

Python is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

9.8CVSS9.5AI score0.08811EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/09/12 12:00 a.m.85 views

Python < 2.7.17, 3.x < 3.5.8, 3.6.x < 3.6.10, 3.7.x < 3.7.5 XSS Vulnerability (bpo-38243) - Mac OS X

Python is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.9AI score0.04653EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2020:0234-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.5AI score0.73327EPSS
SaveExploits48References2
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.45 views

SUSE: Security Advisory (SUSE-SU-2020:1524-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.06617EPSS
SaveExploits1References24
Exploit DB
Exploit DB
added 2020/12/21 12:00 a.m.220 views

Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS

Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS Date: 08/01/2020 Exploit Author: Marco Nappi Vendor Homepage: https://www.flexmonster.com/ Version:Flexmonster Pivot Table & Charts 2.7.17 Tested on:Flexmonster Pivot Table & Charts 2.7.17 CVE : CVE-2020-20141 Cross...

6.1CVSS6.2AI score0.02158EPSS
SaveExploits3
OSV
OSV
added 2020/12/17 11:15 p.m.10 views

CVE-2020-20142

Cross Site Scripting XSS vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Pivot Table & Charts 2.7.17...

6.1CVSS5.8AI score0.02114EPSS
SaveExploits3References1
OSV
OSV
added 2020/12/17 11:15 p.m.11 views

CVE-2020-20139

Cross Site Scripting XSS vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17...

6.1CVSS5.8AI score0.02158EPSS
SaveExploits3References1
Prion
Prion
added 2020/12/17 11:15 p.m.30 views

Cross site scripting

Cross Site Scripting XSS vulnerability in the To OLAP XMLA component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17...

4.3CVSS6AI score0.02158EPSS
SaveExploits3References1Affected Software1
CNNVD
CNNVD
added 2020/12/17 12:00 a.m.12 views

Flexmonster Pivot Table & Charts Cross-Site Scripting Vulnerability

Flexmonster Pivot Table & Charts is a Javascript-based codebase for viewing, analyzing, and managing multidimensional data online from Flexmonster. A cross-site scripting vulnerability exists in the Connect menu in Flexmonster Pivot Table & Charts 2.7.17, which originates in the OLAP XMLA compone...

6.1CVSS6.2AI score0.02158EPSS
SaveExploits3References4
CNNVD
CNNVD
added 2020/12/17 12:00 a.m.16 views

Flexmonster Pivot Table & Charts Cross-Site Scripting Vulnerability

Flexmonster Pivot Table & Charts is a Javascript-based codebase for viewing, analyzing, and managing multidimensional data online from Flexmonster. A cross-site scripting vulnerability exists in Flexmonster Pivot Table & Charts 2.7.17, which originates in the "To Remote CSV" component under the...

6.1CVSS6.2AI score0.02114EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
added 2020/09/02 12:00 a.m.8 views

PT-2021-6687 · Mbed Tls +2 · Mbed Tls +2

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions prior to 2.24.0 Mbed TLS versions prior to 2.16.8 LTS Mbed TLS versions prior to 2.7.17 LTS Description: The issue is related to the missing zeroization of plaintext buffers in the mbedtls ssl read function, which fails to...

9.8CVSS5.9AI score0.02577EPSS
SaveExploits6References86
zdt
zdt
added 2020/07/27 12:00 a.m.436 views

LibreHealth 2.0.0 - Authenticated Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: LibreHealth 2.0.0 - Authenticated Remote Code Execution Exploit Author: Bobby Cooke Vendor Homepage: https://librehealth.io/ Software Link: https://github.com/LibreHealthIO/lh-ehr Version: 2.0.0 Tested On: Windows 10 Pro 1909...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/07/27 12:00 a.m.455 views

LibreHealth 2.0.0 Remote Code Execution

Exploit Title: LibreHealth 2.0.0 - Authenticated Remote Code Execution Exploit Author: Bobby Cooke Date: 2020-07-17 Vendor Homepage: https://librehealth.io/ Software Link: https://github.com/LibreHealthIO/lh-ehr Version: 2.0.0 Tested On: Windows 10 Pro 1909 x6486 + XAMPP 7.4.4 Exploit Tested Usin...

SaveExploits0
Exploit DB
Exploit DB
added 2020/07/26 12:00 a.m.249 views

LibreHealth 2.0.0 - Authenticated Remote Code Execution

Exploit Title: LibreHealth 2.0.0 - Authenticated Remote Code Execution Exploit Author: Bobby Cooke Date: 2020-07-17 Vendor Homepage: https://librehealth.io/ Software Link: https://github.com/LibreHealthIO/lh-ehr Version: 2.0.0 Tested On: Windows 10 Pro 1909 x6486 + XAMPP 7.4.4 Exploit Tested Usin...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/07/20 12:00 a.m.425 views

LibreHealth 2.0.0 Remote Code Execution

Exploit Title: LibreHealth v2.0.0 - Authenticated Remote Code Execution Exploit Author: Bobby Cooke Date: July 17th, 2020 Vendor Homepage: https://librehealth.io/ Software Link: https://github.com/LibreHealthIO/lh-ehr Version: 2.0.0 Tested On: Windows 10 Pro 1909 x6486 + XAMPP 7.4.4 Exploit Teste...

SaveExploits0
zdt
zdt
added 2020/07/20 12:00 a.m.243 views

LibreHealth 2.0.0 Remote Code Execution Exploit

Exploit Title: LibreHealth v2.0.0 - Authenticated Remote Code Execution Exploit Author: Bobby Cooke Vendor Homepage: https://librehealth.io/ Software Link: https://github.com/LibreHealthIO/lh-ehr Version: 2.0.0 Tested On: Windows 10 Pro 1909 x6486 + XAMPP 7.4.4 Exploit Tested Using: Python 2.7.17...

7.1AI score
SaveExploits0
Rows per page
Query Builder