Lucene search
K

28 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 11:42 a.m.2 views

CVE-2025-22297

Cross-Site Request Forgery CSRF vulnerability in aipost AI WP Writer ai-wp-writer allows Cross Site Request Forgery.This issue affects AI WP Writer: from n/a through = 3.8.4.4...

4.3CVSS7.2AI score0.00125EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:33 a.m.3 views

CVE-2024-22297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap allows Stored XSS.This issue affects CBX Map for Google Map & OpenStreetMap: from n/a through 1.1.11...

6.5CVSS6.7AI score0.00065EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:26 p.m.3 views

CVE-2022-22297

An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder...

5.5CVSS6.9AI score0.00064EPSS
Exploits0References1
Circl
Circl
added 2025/01/07 11:17 a.m.2 views

CVE-2025-22297

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jlehq2i2l 2025-01-07 11:17:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jlehq2i2l 2025-01-07 13:10:20+00:00| seen|...

4.3CVSS6.9AI score0.00125EPSS
Exploits0References2
NVD
NVD
added 2025/01/07 11:15 a.m.4 views

CVE-2025-22297

Cross-Site Request Forgery CSRF vulnerability in aipost AI WP Writer ai-wp-writer allows Cross Site Request Forgery.This issue affects AI WP Writer: from n/a through = 3.8.4.4...

4.3CVSS0.00125EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:49 a.m.4 views

CVE-2025-22297 WordPress AI WP Writer plugin <= 3.8.4.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AIpost AI WP Writer allows Cross Site Request Forgery.This issue affects AI WP Writer: from n/a through 3.8.4.4...

4.3CVSS7.2AI score0.00125EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/05/22 12:0 a.m.28 views

Fortinet FortiWeb Arbitrary file read through command line pipe (FG-IR-21-218)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-218 advisory. - An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter o...

5.5CVSS6AI score0.00064EPSS
Exploits0References2
NVD
NVD
added 2024/04/01 10:15 p.m.14 views

CVE-2024-23117

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.2CVSS7.6AI score0.87385EPSS
Exploits0References1
CVE
CVE
added 2024/04/01 9:47 p.m.60 views

CVE-2024-23117

CVE-2024-23117 concerns Centreon: the vulnerability is in the updateContactServiceCommands function where user-supplied input is not properly validated before being used to build SQL queries. This leads to a SQL Injection that can execute arbitrary code in the context of the Centreon service acco...

7.2CVSS7.5AI score0.87385EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/01 9:47 p.m.10 views

CVE-2024-23117 Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.2CVSS7.8AI score0.87385EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/01 9:47 p.m.13 views

CVE-2024-23117 Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.2CVSS7.6AI score0.87385EPSS
Exploits0References1
Circl
Circl
added 2024/01/31 7:31 p.m.0 views

CVE-2024-22297

creationtimestamp| type| source ---|---|--- 2024-01-31 19:31:55+00:00| seen| https://t.me/ctinow/177028 2024-02-22 17:17:41+00:00| seen| https://t.me/ctinow/190947...

6.5CVSS6.7AI score0.00065EPSS
Exploits0References2
NVD
NVD
added 2024/01/31 6:15 p.m.11 views

CVE-2024-22297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap allows Stored XSS.This issue affects CBX Map for Google Map & OpenStreetMap: from n/a through 1.1.11...

6.5CVSS6.4AI score0.00065EPSS
Exploits0References1
CVE
CVE
added 2024/01/31 5:27 p.m.40 views

CVE-2024-22297

CVE-2024-22297 affects WordPress CBX Map for Google Map & OpenStreetMap plugin (versions

6.5CVSS6.7AI score0.00065EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 5:27 p.m.1 views

CVE-2024-22297 WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap allows Stored XSS.This issue affects CBX Map for Google Map & OpenStreetMap: from n/a through 1.1.11...

6.5CVSS9.5AI score0.00065EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/01/17 12:0 a.m.12 views

WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)

Software CBX Map for Google Map & OpenStreetMap Type Plugin Vulnerable versions = 1.1.11 Fixed in 1.1.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22297 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6cbb40aedd6b Credits Ngô Thiên An...

6.5CVSS6.6AI score0.00065EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/05/10 6:28 p.m.3 views

CVE-2023-22297

creationtimestamp| type| source ---|---|--- 2023-05-10 18:28:42+00:00| seen| https://t.me/cibsecurity/63786...

8.2CVSS7.5AI score0.00044EPSS
Exploits0References1
NVD
NVD
added 2023/05/10 2:15 p.m.6 views

CVE-2023-22297

Access of memory location after end of buffer in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access...

8.2CVSS8.2AI score0.00044EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/10 1:17 p.m.12 views

CVE-2023-22297

Access of memory location after end of buffer in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access...

8.2CVSS8.4AI score0.00044EPSS
Exploits0References1
CVE
CVE
added 2023/05/10 1:17 p.m.52 views

CVE-2023-22297

The CVE-2023-22297 issue affects Intel® Server Board BMC firmware prior to 2.90, caused by access of memory location after end of buffer. This can allow a local, privileged user to escalate privileges. Intel’s advisory (intel-sa-00839) confirms the vulnerability and lists CVE-2023-22297 among iss...

8.2CVSS7.7AI score0.00044EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder