Lucene search
K

29 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:49 p.m.3 views

CVE-2022-30548

Uncontrolled search path element in the IntelR Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7AI score0.00066EPSS
Exploits0References1
NVD
NVD
added 2025/04/01 6:15 a.m.2 views

CVE-2025-30548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VarDump s.r.l. Advanced Post Search advanced-post-search allows Reflected XSS.This issue affects Advanced Post Search: from n/a through = 1.1.0...

7.1CVSS0.00219EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.9 views

CVE-2025-30548 WordPress Advanced Post Search plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VarDump s.r.l. Advanced Post Search advanced-post-search allows Reflected XSS.This issue affects Advanced Post Search: from n/a through = 1.1.0...

7.1CVSS0.00219EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 5:31 a.m.44 views

CVE-2025-30548

CVE-2025-30548 is a Reflected XSS in the WordPress plugin Advanced Post Search. The vulnerability affects Advanced Post Search versions from n/a through 1.1.0 and, per the provided documents, remains Unpatched (no fix/version is indicated). The issue targets input during Web Page Generation and c...

7.1CVSS7.2AI score0.00219EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 5:31 a.m.3 views

CVE-2025-30548 WordPress Advanced Post Search plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VarDump s.r.l. Advanced Post Search advanced-post-search allows Reflected XSS.This issue affects Advanced Post Search: from n/a through = 1.1.0...

7.1CVSS8.6AI score0.00219EPSS
Exploits0References1
CVE
CVE
added 2024/03/31 8:2 p.m.59 views

CVE-2024-30548

CVE-2024-30548 affects the WordPress plugin underConstruction (Noah Kagan) with a Stored XSS flaw due to improper input neutralization during web page generation. Affected range is from n/a up to version 1.21. The provided documents explicitly name the vulnerability class and the product, but do ...

5.9CVSS8.6AI score0.00062EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/31 8:2 p.m.17 views

CVE-2024-30548 WordPress underConstruction plugin <= 1.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noah Kagan underConstruction allows Stored XSS.This issue affects underConstruction: from n/a through 1.21...

5.9CVSS5.9AI score0.00062EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.9 views

WordPress underConstruction Plugin <= 1.21 is vulnerable to Cross Site Scripting (XSS)

Software underConstruction Type Plugin Vulnerable versions = 1.21 Fixed in 1.22 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30548 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b0c168347691 Credits Felipe Restrepo Rodriguez Required...

5.9CVSS6.6AI score0.00062EPSS
Exploits0References2Affected Software1
vulnersOsv
vulnersOsv
added 2023/04/20 7:5 p.m.1 views

10secondsofcode-custom (=1.0.0), 1kohei1 (>=1.0.0 <=1.0.1) +945 more potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=1.6.41 <=4.25.0)

gatsby-plugin-sharp NPM version =1.6.41, =1.0.0, =1.0.1, =1.0.0, =0.1.13, =0.48.0, =1.0.0, =1.0.0, =1.0.10, =3.0.0, =4.7.5 - @adobe/gatsby-theme-commerce =0.0.2 and more Source cves: CVE-2023-30548 Source advisory: OSV:GHSA-H2PM-378C-PCXX...

4.3CVSS5.8AI score0.00367EPSS
Exploits1
Circl
Circl
added 2023/04/18 12:28 a.m.2 views

CVE-2023-30548

creationtimestamp| type| source ---|---|--- 2023-04-18 00:28:41+00:00| seen| https://t.me/cibsecurity/62308...

4.3CVSS4.6AI score0.00367EPSS
Exploits1References1
NVD
NVD
added 2023/04/17 9:15 p.m.16 views

CVE-2023-30548

gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...

4.3CVSS4.4AI score0.00367EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/04/17 8:43 p.m.11 views

CVE-2023-30548 Path traversal vulnerability in gatsby-plugin-sharp

gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...

4.3CVSS4.5AI score0.00367EPSS
Exploits1References3
CVE
CVE
added 2023/04/17 8:43 p.m.46 views

CVE-2023-30548

The CVE-2023-30548 issue affects gatsby-plugin-sharp prior to versions 5.8.1 and 4.25.1, introducing a path traversal vulnerability when running the Gatsby develop server. By default, develop is bound to localhost, but if exposed (e.g., via --host 0.0.0.0, -H 0.0.0.0, or GATSBY_HOST=0.0.0.0), an ...

4.3CVSS4.4AI score0.00367EPSS
Exploits1References3Affected Software1
Circl
Circl
added 2022/11/13 5:45 a.m.0 views

CVE-2022-30548

creationtimestamp| type| source ---|---|--- 2022-11-13 05:45:15+00:00| seen| https://t.me/cibsecurity/52885...

7.8CVSS7.5AI score0.00066EPSS
Exploits0References1
NVD
NVD
added 2022/11/11 4:15 p.m.8 views

CVE-2022-30548

Uncontrolled search path element in the IntelR Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00066EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/11/11 3:48 p.m.5 views

CVE-2022-30548

Uncontrolled search path element in the IntelR Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.8AI score0.00066EPSS
Exploits0References1
CVE
CVE
added 2022/11/11 3:48 p.m.45 views

CVE-2022-30548

CVE-2022-30548 affects Intel® Glorp software (version 1.0.0). The issue is an uncontrolled search path element that may allow an authenticated user to escalate privileges locally. Intel has issued a Product Discontinuation Notice and does not plan to provide mitigations/updates; users should unin...

7.8CVSS7.7AI score0.00066EPSS
Exploits0References1Affected Software1
ArchLinux
ArchLinux
added 2021/07/01 12:0 a.m.206 views

[ASA-202107-2] electron11: multiple issues

Arch Linux Security Advisory ASA-202107-2 ========================================= Severity: Critical Date : 2021-07-01 CVE-ID : CVE-2021-30544 CVE-2021-30548 CVE-2021-30551 Package : electron11 Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2099 Summary ======= Th...

8.8CVSS1.7AI score0.8222EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2021/06/28 12:0 a.m.47 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:0881-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0881-1 advisory. - Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a...

8.8CVSS8.2AI score0.8222EPSS
Exploits1References22
OpenVAS
OpenVAS
added 2021/06/17 12:0 a.m.28 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0881-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.5AI score0.8222EPSS
Exploits1References4
Rows per page
Query Builder