Lucene search
K

13 matches found

NVD
NVD
added 2025/02/16 11:15 p.m.8 views

CVE-2025-22290

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows SQL Injection.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a throu...

9.3CVSS0.00061EPSS
Exploits0References1
Circl
Circl
added 2025/02/16 10:44 p.m.2 views

CVE-2025-22290

creationtimestamp| type| source ---|---|--- 2025-02-16 22:44:15+00:00| seen| https://infosec.exchange/users/cve/statuses/114015984110329223 2025-02-16 23:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidefgpkoy2y 2025-02-17 00:42:59+00:00|...

9.3CVSS8.7AI score0.00061EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/02/16 10:17 p.m.6 views

CVE-2025-22290 WordPress LTL Freight Quotes – FreightQuote Edition Plugin <= 2.3.11 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows SQL Injection.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a throu...

9.3CVSS7.3AI score0.00061EPSS
Exploits0References1
Circl
Circl
added 2024/01/31 1:32 p.m.0 views

CVE-2024-22290

creationtimestamp| type| source ---|---|--- 2024-01-31 13:32:24+00:00| seen| https://t.me/ctinow/176718 2024-02-22 14:42:13+00:00| seen| https://t.me/ctinow/190757...

8.8CVSS8.6AI score0.00065EPSS
Exploits0References2
NVD
NVD
added 2024/01/31 12:16 p.m.8 views

CVE-2024-22290

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

8.8CVSS7.1AI score0.00065EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/01/31 11:56 a.m.1 views

CVE-2024-22290 WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

7.1CVSS7.4AI score0.00065EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/31 11:56 a.m.20 views

CVE-2024-22290 WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting XSS.This issue affects Custom Dashboard Widgets: from n/a through 1.3.1...

7.1CVSS8.4AI score0.00065EPSS
Exploits0References1
CVE
CVE
added 2024/01/31 11:56 a.m.45 views

CVE-2024-22290

CVE-2024-22290 (WordPress Custom Dashboard Widgets) The vulnerability affects the Custom Dashboard Widgets plugin for WordPress, versions up to and including 1.3.1. It is described as a Cross-Site Request Forgery (CSRF) vulnerability that can lead to Cross-Site Scripting (XSS) via cdw_DashboardWi...

8.8CVSS8.4AI score0.00065EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/01/16 12:0 a.m.10 views

WordPress Custom Dashboard Widgets Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Custom Dashboard Widgets Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-22290 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 9f6ec6ec2096 Credits Dimas Maulan...

8.8CVSS6.6AI score0.00065EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/11/14 7:15 p.m.16 views

CVE-2023-22290

Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access...

6.5CVSS0.00171EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/14 7:4 p.m.14 views

CVE-2023-22290

Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access...

6.5CVSS6.6AI score0.00171EPSS
Exploits0References1
CVE
CVE
added 2023/11/14 7:4 p.m.41 views

CVE-2023-22290

CVE-2023-22290 describes an uncaught exception in Intel® Unison™ software that may allow an authenticated user to trigger a denial of service over the network. The NVD/Intel entry lists a CVSS v3.1 base score of 6.5 (Network, Low complexity, Low privileges, Availability impact) and notes the vuln...

6.5CVSS6.3AI score0.00171EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/01/14 7:11 p.m.98 views

CVE-2022-22290

CVE-2022-22290 affects Samsung Internet and is described in connected sources as an Incorrect download source UI in the Downloads component prior to version 16.0.6.23, enabling domain spoofing via a crafted HTML page. The vulnerability is tied to the user download interface rather than an in-app ...

6.5CVSS6.2AI score0.00305EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder