Lucene search
K

17 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-23996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could...

6.5CVSS7.3AI score0.00186EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:12 a.m.23 views

CVE-2023-23996

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.3 versions...

5.9CVSS5.6AI score0.00238EPSS
Exploits0References1
Redos
Redos
added 2025/05/13 12:0 a.m.24 views

ROS-2-657

2.657 Multiple vulnerabilities in Mozilla Firefox CVE-2021-23994, CVE-2021-23995, CVE-2021-23996, CVE-2021-23997, CVE-2021-23998, CVE-2021-23999, CVE-2021-24000, CVE-2021-24001, CVE-2021-24002, CVE-2021-29945, CVE-2021-29947, CVE-2021-29946. 1. Vulnerability Description: Vulnerabilities allow a...

8.8CVSS7.3AI score0.00765EPSS
Exploits1
Cvelist
Cvelist
added 2025/01/21 5:21 p.m.14 views

CVE-2025-23996 WordPress AnyRoad plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AnyRoad AnyRoad anyguide allows Cross Site Request Forgery.This issue affects AnyRoad: from n/a through = 1.3.2...

4.3CVSS0.00177EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 5:21 p.m.5 views

CVE-2025-23996 WordPress AnyRoad plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in AnyRoad AnyRoad anyguide allows Cross Site Request Forgery.This issue affects AnyRoad: from n/a through = 1.3.2...

4.3CVSS7.2AI score0.00177EPSS
Exploits0References1
CVE
CVE
added 2025/01/21 5:21 p.m.46 views

CVE-2025-23996

CVE-2025-23996 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress AnyRoad plugin (AnyRoad) affecting versions up to 1.3.2. The connected sources consistently state the issue as CSRF and identify the affected range as “from n/a through 1.3.2.” No exploit details or specif...

4.3CVSS7.2AI score0.00177EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/05/04 12:0 a.m.9 views

WordPress ProfilePress Plugin < 4.5.4 Multiple XSS Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:properfraction:profilepress"; if description...

7.1CVSS5.5AI score0.00496EPSS
Exploits0References2
NVD
NVD
added 2023/04/06 8:15 a.m.9 views

CVE-2023-23996

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.3 versions...

5.9CVSS5.4AI score0.00238EPSS
Exploits0References1
CVE
CVE
added 2023/04/06 7:46 a.m.36 views

CVE-2023-23996

CVE-2023-23996 affects the WordPress ProfilePress Plugin (ProfilePress Membership Team ProfilePress)

5.9CVSS4.9AI score0.00238EPSS
Exploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.1 views

SUSE CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS8.6AI score0.00186EPSS
Exploits0References4
Patchstack
Patchstack
added 2023/01/20 12:0 a.m.7 views

WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)

Software ProfilePress Type Plugin Vulnerable versions = 4.5.3 Fixed in 4.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23996 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8fffbd3790ea Credits Rio Darmawan Required...

5.9CVSS5.8AI score0.00238EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/02/11 5:40 p.m.88 views

CVE-2022-23996

CVE-2022-23996 concerns an unprotected component vulnerability in the Wear OS 3.0 component named StTheaterModeReceiver . The issue, present before the firmware update in Feb-2022, allows untrusted applications to enable bedtime mode without proper permission. Affected platform: Wear OS 3.0. Root...

4.3CVSS4.1AI score0.00188EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/06/24 1:25 p.m.140 views

CVE-2021-23996

CVE-2021-23996 affects Mozilla Firefox prior to 88.0, where a flaw in rendering with 3D CSS and JavaScript could cause content to appear outside the viewport, enabling spoofing potentially for phishing. Multiple connected advisories (Arch Linux ASA-202104-3, Alpine, CNVD/CNNVD entries, Kaspersky,...

6.5CVSS6.2AI score0.00186EPSS
Exploits0References2Affected Software1
Ubuntu
Ubuntu
added 2021/04/26 10:44 a.m.133 views

USN-4926-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, trick the user into disclosing confidential...

8.8CVSS7.7AI score0.00765EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2021/04/26 12:0 a.m.48 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-4926-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4926-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker...

8.8CVSS7.7AI score0.00765EPSS
Exploits1References13
OSV
OSV
added 2021/04/19 12:0 a.m.0 views

UBUNTU-CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS6.8AI score0.00186EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2021/04/19 12:0 a.m.24 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS6.8AI score0.00186EPSS
Exploits0References3
Rows per page
Query Builder