Lucene search
K

15 matches found

vulnersOsv
vulnersOsv
added 2026/03/24 8:33 p.m.3 views

@stnd/build (=0.18.70), stnd (=0.18.70) potentially affected by CVE-2026-29772 via astro (=6.0.0-beta.1)

astro NPM version =6.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on astro and may be impacted: - @stnd/build =0.18.70 - stnd =0.18.70 Source cves: CVE-2026-29772 Source advisory: SNYK:JS-ASTRO-15763371...

7.5CVSS5.8AI score0.00026EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2026/03/24 7:29 p.m.3 views

astro-service-worker (=0.0.1) potentially affected by CVE-2026-29772 via @astrojs/node (=0.1.6)

@astrojs/node NPM version =0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on @astrojs/node and may be impacted: - astro-service-worker =0.0.1 Source cves: CVE-2026-29772 Source advisory: OSV:GHSA-3RMJ-9M5H-8FPV...

7.5CVSS5.8AI score0.00026EPSS
Exploits1
Circl
Circl
added 2026/03/24 6:11 p.m.2 views

CVE-2026-29772

creationtimestamp| type| source ---|---|--- 2026-03-24 18:11:06+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-3rmj-9m5h-8fpv...

7.5CVSS5.8AI score0.00026EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:56 a.m.4 views

CVE-2024-29772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stormhill Media MyBookTable Bookstore allows Stored XSS.This issue affects MyBookTable Bookstore: from n/a through 3.3.7...

6.5CVSS8.6AI score0.00197EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 4:3 p.m.8 views

CVE-2025-29772 OpenEMR allows Reflected XSS in CAMOS new.php

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hiddensubcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting XSS vul;nerability in CAMOS new.php. This...

7.2CVSS5.6AI score0.00848EPSS
Exploits1References2
NVD
NVD
added 2024/03/27 1:15 p.m.8 views

CVE-2024-29772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stormhill Media MyBookTable Bookstore allows Stored XSS.This issue affects MyBookTable Bookstore: from n/a through 3.3.7...

6.5CVSS6.4AI score0.00197EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/27 12:55 p.m.12 views

CVE-2024-29772 WordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stormhill Media MyBookTable Bookstore allows Stored XSS.This issue affects MyBookTable Bookstore: from n/a through 3.3.7...

6.5CVSS6.5AI score0.00197EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/27 12:55 p.m.13 views

CVE-2024-29772 WordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stormhill Media MyBookTable Bookstore allows Stored XSS.This issue affects MyBookTable Bookstore: from n/a through 3.3.7...

6.5CVSS6.6AI score0.00197EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/03/25 12:0 a.m.7 views

WordPress MyBookTable Bookstore Plugin <= 3.3.7 is vulnerable to Cross Site Scripting (XSS)

Software MyBookTable Bookstore Type Plugin Vulnerable versions = 3.3.7 Fixed in 3.3.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2024-29772 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b4a056c5d251 Credits CatFather Required...

6.5CVSS6.6AI score0.00197EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/05/02 4:30 p.m.2 views

CVE-2023-29772

creationtimestamp| type| source ---|---|--- 2023-05-02 16:30:09+00:00| seen| https://t.me/cibsecurity/63154...

5.2CVSS5.5AI score0.01342EPSS
Exploits1References1
CVE
CVE
added 2023/05/02 12:0 a.m.44 views

CVE-2023-29772

Affected product/version: ASUS RT-AC51U wireless router firmware up to and including 3.0.0.4.380.8591. Vulnerability: Cross-site scripting (XSS) on the System Log/General Log page of the administrator web UI, allowing remote attackers to inject arbitrary web script or HTML via a malicious network...

5.2CVSS5AI score0.01342EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/05/02 12:0 a.m.12 views

CVE-2023-29772

A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request...

5.3AI score0.01342EPSS
Exploits1References1
Circl
Circl
added 2021/08/27 12:27 a.m.2 views

CVE-2021-29772

creationtimestamp| type| source ---|---|--- 2021-08-27 00:27:14+00:00| seen| https://t.me/cibsecurity/27937...

9.8CVSS6.4AI score0.0025EPSS
Exploits0References1
CVE
CVE
added 2021/08/26 7:25 p.m.44 views

CVE-2021-29772

IBM API Connect CVE-2021-29772 affects 5.0.0.0–5.0.8.11 and is due to unsanitized user input allowing code injection. The IBM advisory lists a fix in 5.0.8.12 (remediation). Affected component/stack is API Connect; network-exposed attack vector with low attacker complexity in some sources. No exp...

9.8CVSS8.9AI score0.0025EPSS
Exploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/08/25 1:26 p.m.14 views

Security Bulletin: API Connect V5 is potentially vulnerable to code injection (CVE-2021-29772)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-29772 DESCRIPTION: IBM API Connect could allow a user to potentially inject code due to unsanitized user input. CVSS Base score: 5.6 CVSS Temporal Score: See:...

9.8CVSS2AI score0.0025EPSS
Exploits0Affected Software1
Rows per page
Query Builder