Lucene search
K

26 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:34 a.m.2 views

CVE-2024-22310

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Formzu Inc. Formzu WP allows Stored XSS.This issue affects Formzu WP: from n/a through 1.6.7...

6.5CVSS6.7AI score0.00317EPSS
Exploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.7 views

CVE-2025-22310

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marsian TemplatesNext ToolKit templatesnext-toolkit allows Stored XSS.This issue affects TemplatesNext ToolKit: from n/a through = 3.2.9...

6.5CVSS0.00284EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/07 10:48 a.m.22 views

CVE-2025-22310 WordPress TemplatesNext ToolKit plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in marsian TemplatesNext ToolKit templatesnext-toolkit allows Stored XSS.This issue affects TemplatesNext ToolKit: from n/a through = 3.2.9...

6.5CVSS0.00284EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 10:48 a.m.58 views

CVE-2025-22310

CVE-2025-22310 : Stored XSS in TemplatesNext ToolKit (TemplatesNext ToolKit

6.5CVSS7.2AI score0.00284EPSS
Exploits0References1
NVD
NVD
added 2024/11/22 8:15 p.m.19 views

CVE-2024-6246

Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

9.6CVSS0.00968EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 8:5 p.m.14 views

CVE-2024-6246 Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability

Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

9.6CVSS8AI score0.00968EPSS
Exploits0References1
CVE
CVE
added 2024/11/22 8:5 p.m.49 views

CVE-2024-6246

CVE-2024-6246 affects Wyze Cam v3 via the Realtek Wi‑Fi kernel module. It is a heap-based buffer overflow caused by inadequate validation of user-supplied data length, allowing network-adjacent attackers to execute code in the kernel context without authentication. The vulnerability is documented...

9.6CVSS9.6AI score0.00968EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/22 8:5 p.m.25 views

CVE-2024-6246 Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability

Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

9.6CVSS0.00968EPSS
Exploits0References1
Circl
Circl
added 2024/01/31 6:22 p.m.1 views

CVE-2024-22310

creationtimestamp| type| source ---|---|--- 2024-01-31 18:22:19+00:00| seen| https://t.me/ctinow/176961 2024-02-22 17:52:30+00:00| seen| https://t.me/ctinow/190977...

6.5CVSS6.7AI score0.00317EPSS
Exploits0References2
CVE
CVE
added 2024/01/31 4:46 p.m.42 views

CVE-2024-22310

CVE-2024-22310 affects Formzu WP (WordPress plugin) up to version 1.6.7 and is caused by improper neutralization of input during web page generation, enabling Stored XSS. The vulnerability targets the plugin’s handling of user-supplied input in the WordPress pages, leading to cross-site scripting...

6.5CVSS6.7AI score0.00317EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/01/19 12:0 a.m.7 views

WordPress Formzu WP Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

Software Formzu WP Type Plugin Vulnerable versions = 1.6.7 Fixed in 1.6.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22310 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e73af945ea06 Credits Ngô Thiên An ancorn from VNPT-VCI Required...

6.5CVSS6.6AI score0.00317EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/11/14 7:15 p.m.10 views

CVE-2023-22310

Race condition in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

6.5CVSS0.00123EPSS
Exploits0References1
CVE
CVE
added 2023/11/14 7:4 p.m.32 views

CVE-2023-22310

CVE-2023-22310 describes a race condition in Intel’s Aptio V UEFI Firmware Integrator Tools that could allow an authenticated user to trigger a denial of service via local access. Affected products include Intel Aptio V UEFI Firmware Integrator Tools and related installers for various Intel NUC/N...

6.5CVSS4.6AI score0.00123EPSS
Exploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 3:28 p.m.21 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products (CVE-2022-22310)

Summary WebSphere Application Server Liberty is shipped as part of the optional components Process Federation Server since 8.5.6, and User Management Service since 18.0.0.1 in IBM Business Automation Workflow and IBM Business Process Manager. Information about a security vulnerability affecting I...

5.7AI score0.01142EPSS
Exploits0Affected Software5
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/09 6:8 p.m.20 views

Security Bulletin: Vulnerability in WebSphere Liberty affecting Watson Knowledge Catalog for IBM Cloud Pak for Data

Summary WebSphere liberty is vulnerable to an Information Disclosure that is impacting Watson Knowledge Catalog for IBM Cloud Pak for Data. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2022-22310 DESCRIPTION: IBM WebSphere Application Server Liberty 21.0.0.10 through...

6.5CVSS6AI score0.01142EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/04 5:24 a.m.21 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Tivoli Netcool Impact (CVE-2022-22310)

Summary IBM WebSphere Liberty is shipped as a component of IBM Tivoli Netcool Impact. Information about a security vulnerability affecting IBM WebSphere Liberty has been published in a security bulletin. Vulnerability Details CVEID: CVE-2022-22310 DESCRIPTION: IBM WebSphere Application Server...

6.5CVSS0.4AI score0.01142EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/22 7:1 a.m.20 views

Security Bulletin: IBM Transformation Extender Advanced is vulnerable to information exposure due to IBM WebSphere Application Server Liberty (CVE-2022-22310)

Summary IBM Transformation Extender Advanced, previously known as IBM Standards Processing Engine, uses IBM WebSphere Application Server Liberty. An information exposure in IBM WebSphere Application Server Liberty has been addressed. Vulnerability Details CVEID: CVE-2022-22310 DESCRIPTION: IBM...

6.5CVSS6.2AI score0.01142EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/24 6:19 a.m.23 views

Security Bulletin: IBM PowerVM Novalink is vulnerable to provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications.

Summary IBM PowerVM Novalink, which consumes IBM WebSphere Application Server Liberty 21.0.0.10 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM strongly recommends...

6.5CVSS6.2AI score0.01142EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/10 12:0 a.m.74 views

IBM WebSphere Application Server Liberty 21.0.0.10 <= 21.0.0.12 Information Disclosure (6541530)

The IBM WebSphere Application Server running on the remote host is 21.0.0.10 through 21.0.0.12. It is, therefore, affected by an information disclosure vulnerability. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications...

6.5CVSS5.9AI score0.01142EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/08 4:14 p.m.17 views

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled in IBM WebSphere Hybrid Edition, is vulnerable to an Information Disclosure (CVE-2022-22310)

Summary IBM WebSphere Application Server Liberty, which is bundled in IBM WebSphere Hybrid Edition, is vulnerable to an Information Disclosure CVE-2022-22310. The IBM WebSphere Application Server Liberty could provide weaker than expected security. A remote attacker could exploit this weakness to...

6.5CVSS6AI score0.01142EPSS
Exploits0Affected Software1
Rows per page
Query Builder