Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:55 a.m.3 views

CVE-2022-23682

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

7.8CVSS8.3AI score0.00348EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:47 a.m.4 views

CVE-2025-23682

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bhuvnesh Gupta Preloader Quotes preloader-quotes allows Reflected XSS.This issue affects Preloader Quotes: from n/a through = 1.0.0...

7.1CVSS7.2AI score0.00346EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:12 a.m.4 views

CVE-2023-23682

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Snap Creek Software EZP Maintenance Mode plugin = 1.0.1 versions...

5.9CVSS5.6AI score0.00207EPSS
Exploits1References1
NVD
NVD
added 2025/01/22 3:15 p.m.2 views

CVE-2025-23682

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bhuvnesh Gupta Preloader Quotes preloader-quotes allows Reflected XSS.This issue affects Preloader Quotes: from n/a through = 1.0.0...

7.1CVSS0.00346EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.10 views

CVE-2025-23682 WordPress Preloader Quotes plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bhuvnesh Gupta Preloader Quotes preloader-quotes allows Reflected XSS.This issue affects Preloader Quotes: from n/a through = 1.0.0...

7.1CVSS0.00346EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/22 2:29 p.m.5 views

CVE-2025-23682 WordPress Preloader Quotes plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Preloader Quotes allows Reflected XSS. This issue affects Preloader Quotes: from n/a through 1.0.0...

7.1CVSS6.9AI score0.00346EPSS
Exploits0References1
Circl
Circl
added 2024/01/26 8:16 p.m.0 views

CVE-2024-23682

creationtimestamp| type| source ---|---|--- 2024-01-26 20:16:24+00:00| seen| https://t.me/ctinow/174445 2024-02-15 15:56:49+00:00| seen| https://t.me/ctinow/185642 2025-06-20 18:42:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19029...

8.2CVSS7.9AI score0.00281EPSS
Exploits1References3
NVD
NVD
added 2024/01/19 9:15 p.m.10 views

CVE-2024-23682

Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code...

8.2CVSS8.5AI score0.00281EPSS
Exploits1References5
CVE
CVE
added 2024/01/19 8:13 p.m.41 views

CVE-2024-23682

CVE-2024-23682 affects Artemis Java Test Sandbox up to version 1.8.0. The vulnerability is a sandbox escape where an attacker can force inclusion of class files in a package trusted by Ares, enabling arbitrary Java code execution when sandboxed code is run. Root cause involves how trusted package...

8.2CVSS8.4AI score0.00281EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2023/05/15 1:15 p.m.11 views

CVE-2023-23682

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Snap Creek Software EZP Maintenance Mode plugin = 1.0.1 versions...

5.9CVSS5.4AI score0.00207EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/05/15 12:14 p.m.9 views

CVE-2023-23682 WordPress EZP Maintenance Mode Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Snap Creek Software EZP Maintenance Mode plugin = 1.0.1 versions...

5.9CVSS5.8AI score0.00207EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/05/15 12:14 p.m.10 views

CVE-2023-23682 WordPress EZP Maintenance Mode Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Snap Creek Software EZP Maintenance Mode plugin = 1.0.1 versions...

5.9CVSS5.5AI score0.00207EPSS
Exploits1References1
CVE
CVE
added 2023/05/15 12:14 p.m.32 views

CVE-2023-23682

CVE-2023-23682 is an admin+ Stored XSS vulnerability in EZP Maintenance Mode (WordPress plugin) up to version 1.0.1. The issue stems from insufficient sanitization of plugin settings, enabling stored XSS in the admin context. Public details in the provided sources confirm the vulnerability and CV...

5.9CVSS5.1AI score0.00207EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2023/04/19 12:0 a.m.7 views

WordPress EZP Maintenance Mode Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software EZP Maintenance Mode Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23682 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 6363a7ffe7cd Credits Rio Darmawan Require...

5.9CVSS6AI score0.00207EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2022/09/06 6:15 p.m.10 views

CVE-2022-23682

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

7.8CVSS0.00348EPSS
Exploits0References1
CVE
CVE
added 2022/09/06 5:18 p.m.76 views

CVE-2022-23682

Multiple vulnerabilities exist in the Aruba AOS-CX command line interface that could permit authenticated command injection, allowing an attacker to execute arbitrary commands as root and fully compromise the switch. Affected ArubaOS-CX versions are: 10.09.xxxx up to 10.09.1030, 10.08.xxxx up to ...

7.8CVSS8.2AI score0.00348EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2022/02/16 5:15 p.m.9 views

CVE-2021-23682

This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the query string in the getJsonFromUrl function, the key that is set in the result object is not properly sanitized leading to a Prototype Pollution...

9.8CVSS9.4AI score
Exploits0References6
Cvelist
Cvelist
added 2022/02/16 5:5 p.m.21 views

CVE-2021-23682 Prototype Pollution

This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the query string in the getJsonFromUrl function, the key that is set in the result object is not properly sanitized leading to a Prototype Pollution...

7.3CVSS9.6AI score0.05384EPSS
Exploits1References6
CVE
CVE
added 2022/02/16 5:5 p.m.82 views

CVE-2021-23682

Prototype pollution vulnerability in litespeed.js (

9.8CVSS8.3AI score0.05384EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder