Lucene search
+L

166 matches found

OSV
OSV
added 2023/07/06 7:18 p.m.26 views

CVE-2023-3531 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

8.1CVSS7.3AI score
SaveExploits0References4
Redos
Redos
added 2023/07/06 12:00 a.m.30 views

ROS-2-639

2.639 Vulnerability in VLC CVE-2019-19721, CVE-2020-6071, CVE-2020-6072, CVE-2020-6073, CVE-2020-6077, CVE-2020-6078, CVE-2020-6079 1. Vulnerability Description: The vulnerability allows a remote user to: - create a customized image file that can cause an out-of-bounds read, - send a specially...

9.8CVSS7.1AI score0.03727EPSS
SaveExploits7
NVD
NVD
added 2023/06/28 9:15 p.m.19 views

CVE-2023-32224

D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...

9.8CVSS9.7AI score0.01399EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/28 9:15 p.m.11 views

CVE-2023-32224

D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...

9.8CVSS5.8AI score0.01399EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/28 9:15 p.m.11 views

CVE-2023-32223

D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method...

8.8CVSS5.9AI score0.01762EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/28 9:15 p.m.32 views

Design/Logic Flaw

D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method...

6.5CVSS9AI score0.01762EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
added 2023/06/28 7:54 a.m.9 views

CVE-2023-32224

D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...

9.8CVSS5.8AI score0.01399EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2023/06/28 7:54 a.m.9 views

CVE-2023-32223

D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method...

8.8CVSS6AI score0.01762EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/28 12:00 a.m.23 views

D-Link DSL-224 安全漏洞

AUO Electronic Devices Shanghai Co. DSL-224 is a wireless router from China's AUO D-Link. An authentication bypass vulnerability exists in the AUO DSL-224 version 3.0.10, which stems from an improper restriction of too many authentication attempts. An attacker could exploit the vulnerability to...

9.8CVSS6.9AI score0.01399EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/28 12:00 a.m.13 views

D-Link DSL-224 安全漏洞

The D-Link DSL-224 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-224 version 3.0.10, which originates from allowing execution of authenticated commands via unspecified methods...

8.8CVSS8.3AI score0.01762EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/06/28 12:00 a.m.14 views

CVE-2023-32224 D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts

D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...

9.8CVSS7.3AI score0.01399EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/10 12:00 a.m.11 views

WordPress plugin Klaviyo 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS6.3AI score0.00442EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2023/04/10 12:00 a.m.9 views

PT-2023-16578 · WordPress · Klaviyo

Name of the Vulnerable Software and Affected Versions: Klaviyo WordPress plugin versions prior to 3.0.10 Description: The issue allows high-privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitized and escape...

4.8CVSS5.5AI score0.00442EPSS
SaveExploits2References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:03 a.m.7 views

SUSE CVE-2009-2065

Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that...

6.8CVSS7.1AI score0.00851EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:44 a.m.9 views

SUSE CVE-2017-10140

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DBCONFIG in the current directory...

7.8CVSS7.8AI score0.00567EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.28 views

collective.task Cross-site Scripting vulnerability

A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.py. The manipulation leads to cross site scripting. It is possible to initiate the attack remotel...

6.1CVSS6AI score0.00547EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/12/15 9:30 p.m.63 views

GHSA-4R9H-X77W-MFFV collective.task Cross-site Scripting vulnerability

A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.py. The manipulation leads to cross site scripting. It is possible to initiate the attack remotel...

6.1CVSS5.9AI score0.00547EPSS
SaveExploits0References7
PyPA
PyPA
added 2022/12/15 9:15 p.m.12 views

PYSEC-2022-42990

A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.py. The manipulation leads to cross site scripting. It is possible to initiate the attack remotel...

6.1CVSS6.1AI score0.00547EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/12/15 9:15 p.m.22 views

PYSEC-2022-42990

A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.py. The manipulation leads to cross site scripting. It is possible to initiate the attack remotel...

6.1CVSS6.6AI score0.00547EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/12/15 12:00 a.m.10 views

PT-2022-27453 · Unknown · Collective.Task

Name of the Vulnerable Software and Affected Versions: collective.task versions up to 3.0.9 Description: A vulnerability was found in collective.task, affecting the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.py. The manipulation leads to cross-site...

6.1CVSS4.3AI score0.00547EPSS
SaveExploits0References14
Rows per page
Query Builder