Lucene search
K

21 matches found

Circl
Circl
added 2026/01/16 7:30 a.m.1 views

CVE-2026-23713

creationtimestamp| type| source ---|---|--- 2026-01-16 07:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjlbqhhfb2x...

5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/16 4:30 a.m.2 views

CVE-2026-23713

Not used...

5.4AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:48 a.m.2 views

CVE-2025-23713

Cross-Site Request Forgery CSRF vulnerability in artanik Hack me if you can hack-me-if-you-can allows Stored XSS.This issue affects Hack me if you can: from n/a through = 1.2...

7.1CVSS7.2AI score0.00125EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:1 a.m.7 views

CVE-2024-23713

In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.1AI score0.00025EPSS
Exploits0References1
Circl
Circl
added 2025/01/16 8:19 p.m.1 views

CVE-2025-23713

creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43zstlg2s 2025-01-16 22:05:44+00:00| seen| https://t.me/cvedetector/15628 2025-01-17 01:08:25+00:00| seen|...

7.1CVSS7.3AI score0.00125EPSS
Exploits0References3
NVD
NVD
added 2025/01/16 8:15 p.m.4 views

CVE-2025-23713

Cross-Site Request Forgery CSRF vulnerability in artanik Hack me if you can hack-me-if-you-can allows Stored XSS.This issue affects Hack me if you can: from n/a through = 1.2...

7.1CVSS0.00125EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/01/16 8:15 p.m.1 views

CVE-2025-23713

Cross-Site Request Forgery CSRF vulnerability in artanik Hack me if you can hack-me-if-you-can allows Stored XSS.This issue affects Hack me if you can: from n/a through = 1.2...

7.1CVSS7.2AI score0.00125EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/01/16 8:6 p.m.9 views

CVE-2025-23713 WordPress Hack me if you can plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in artanik Hack me if you can hack-me-if-you-can allows Stored XSS.This issue affects Hack me if you can: from n/a through = 1.2...

7.1CVSS0.00125EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:6 p.m.2 views

CVE-2025-23713 WordPress Hack me if you can plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Artem Anikeev Hack me if you can allows Stored XSS.This issue affects Hack me if you can: from n/a through 1.2...

7.1CVSS6.9AI score0.00125EPSS
Exploits0References1
CVE
CVE
added 2025/01/16 8:6 p.m.41 views

CVE-2025-23713

The connected Red Hat advisory for CVE-2025-23713 confirms a Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in the Hack me if you can plugin/app (affected range: from n/a through 1.2). The description in the CVE entry itself also notes a CSRF to Stored XSS vulnerab...

7.1CVSS7.2AI score0.00125EPSS
Exploits0References1
NVD
NVD
added 2024/05/07 9:15 p.m.17 views

CVE-2024-23713

In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS6.8AI score0.00025EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/07 9:1 p.m.18 views

CVE-2024-23713

In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.2AI score0.00025EPSS
Exploits0References2
CVE
CVE
added 2024/05/07 9:1 p.m.153 views

CVE-2024-23713

CVE-2024-23713 affects Google's Android Framework, specifically migrateNotificationFilter in NotificationManagerService.java. The root cause is improper input validation that can fail to persist notification settings, enabling local privilege escalation with no extra execution privileges required...

7.8CVSS7AI score0.00025EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/07 9:1 p.m.15 views

CVE-2024-23713

In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7AI score0.00025EPSS
Exploits0References2
Circl
Circl
added 2023/05/23 6:26 p.m.0 views

CVE-2023-23713

creationtimestamp| type| source ---|---|--- 2023-05-23 18:26:32+00:00| seen| https://t.me/cibsecurity/64639...

8.8CVSS8.6AI score0.00149EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/23 1:16 p.m.6 views

CVE-2023-23713 WordPress Theme Tweaker Plugin <= 5.20 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Manoj Thulasidas Theme Tweaker plugin = 5.20 versions...

4.3CVSS8.8AI score0.00149EPSS
Exploits0References1
CVE
CVE
added 2023/05/23 1:16 p.m.31 views

CVE-2023-23713

CVE-2023-23713 pertains to the WordPress plugin Theme Tweaker by Manoj Thulasidas, affected versions up to and including 5.20. The vulnerability is a Cross-Site Forgery (CSRF) flaw, with the root cause described as CSRF in the plugin’s handling of requests. Public sources specify the impact as hi...

8.8CVSS6.5AI score0.00149EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/23 1:16 p.m.17 views

CVE-2023-23713 WordPress Theme Tweaker Plugin <= 5.20 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Manoj Thulasidas Theme Tweaker plugin = 5.20 versions...

4.3CVSS9AI score0.00149EPSS
Exploits0References1
CVE
CVE
added 2022/07/06 1:56 p.m.99 views

CVE-2022-23713

CVE-2022-23713 corresponds to a cross-site scripting (XSS) flaw in Vega Charts Kibana integration. Multiple sources (NVD entry, CNVD, Nessus findings, and Elastic security notes) confirm the affected component as Kibana’s Vega Charts integration and describe the impact as arbitrary JavaScript exe...

6.1CVSS6AI score0.00789EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/07/06 1:56 p.m.15 views

CVE-2022-23713

A cross-site-scripting XSS vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser...

6.2AI score0.00789EPSS
Exploits0References2
Rows per page
Query Builder