Lucene search
K

15 matches found

NVD
NVD
added 2025/03/03 2:15 p.m.3 views

CVE-2025-23619

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS0.00346EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/03/03 2:15 p.m.1 views

CVE-2025-23619

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS5.9AI score0.00346EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.4 views

CVE-2025-23619 WordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS5.2AI score0.00346EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.10 views

CVE-2025-23619 WordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through = 2.0...

7.1CVSS0.00346EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.44 views

CVE-2025-23619

CVE-2025-23619 refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Catch Duplicate Switcher (versions

7.1CVSS5.9AI score0.00346EPSS
Exploits0References1
Circl
Circl
added 2024/01/26 1:31 a.m.1 views

CVE-2024-23619

creationtimestamp| type| source ---|---|--- 2024-01-26 01:31:31+00:00| seen| https://t.me/ctinow/173915...

10CVSS8.7AI score0.00945EPSS
Exploits0References1
CVE
CVE
added 2024/01/25 11:35 p.m.53 views

CVE-2024-23619

CVE-2024-23619 affects IBM Merge Healthcare eFilm Workstation. The connected documents identify a hardcoded credential vulnerability as the root cause, allowing a remote, unauthenticated attacker to achieve information disclosure or remote code execution. Affected software is IBM Merge Healthcare...

10CVSS9AI score0.00945EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/25 11:35 p.m.13 views

CVE-2024-23619 IBM Merge Healthcare eFilm Workstation Hardcoded Credentials

A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution...

10CVSS9.4AI score0.00945EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/01/26 10:42 a.m.4 views

CVE-2023-23619 Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina

Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to Code injection. This issue affects anyone who is using the default presets and/or does not handle the functionality themself. This issue...

9.9CVSS10AI score0.00473EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/01/26 10:42 a.m.16 views

CVE-2023-23619 Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina

Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to Code injection. This issue affects anyone who is using the default presets and/or does not handle the functionality themself. This issue...

9.9CVSS10AI score0.00473EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2022/02/11 12:0 a.m.16 views

XWiki Information Disclosure Vulnerability (GHSA-35fg-hjcr-j65f)

XWiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

7.5CVSS7.2AI score0.00069EPSS
Exploits0References1
Circl
Circl
added 2022/02/10 12:13 a.m.1 views

CVE-2022-23619

creationtimestamp| type| source ---|---|--- 2022-02-10 00:13:23+00:00| seen| https://t.me/cibsecurity/37131...

7.5CVSS7.3AI score0.00069EPSS
Exploits0References1
CVE
CVE
added 2022/02/09 9:10 p.m.103 views

CVE-2022-23619

XWiki Platform contains an information disclosure vulnerability where the Forgot your password form can reveal whether a user exists, even when the site is restricted to guests. Affected versions are patched in XWiki 12.10.9, 13.4.1, and 13.6RC1. The issue has been confirmed across multiple advis...

7.5CVSS6.1AI score0.00069EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2022/02/09 9:10 p.m.18 views

CVE-2022-23619 Information exposure in xwiki-platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to guest users. This problem has been...

5.3CVSS7.7AI score0.00069EPSS
Exploits0References3
vulnersOsv
vulnersOsv
added 2021/09/21 6:41 p.m.1 views

@asyncapi/cli (>=0.21.0 <=0.27.3), @asyncapi/dotnet-nats-template (>=0.2.0 <=0.8.4) +9 more potentially affected by CVE-2023-23619 via @asyncapi/modelina (>=0.11.0 <=0.9.0)

@asyncapi/modelina NPM version =0.11.0, =0.21.0, =0.2.0, =0.1.8, =0.3.33, =0.4.0, =0.0.1, =0.0.1, =0.1.0, =0.1.7 Source cves: CVE-2023-23619 Source advisory: OSV:GHSA-4JG2-84C2-PJ95...

9.9CVSS7.2AI score0.00473EPSS
Exploits1
Rows per page
Query Builder