Lucene search
K

110 matches found

EUVD
EUVD
added 2026/01/18 1:2 p.m.2 views

EUVD-2026-3175

A vulnerability has been found in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/delwork.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS6.4AI score0.00015EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 3:47 a.m.4 views

CVE-2023-3175

The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS6.1AI score0.00182EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:51 p.m.5 views

CVE-2022-3175

Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...

5.3CVSS6.8AI score0.00232EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:32 p.m.5 views

CVE-2005-3175

Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator...

7.2CVSS6.7AI score0.00234EPSS
Exploits0References1
Circl
Circl
added 2025/04/03 11:36 p.m.0 views

CVE-2025-3175

creationtimestamp| type| source ---|---|--- 2025-04-03 23:36:34+00:00| seen| https://t.me/cvedetector/22031...

9.8CVSS7.3AI score0.00416EPSS
Exploits0References1
NVD
NVD
added 2025/04/03 7:15 p.m.4 views

CVE-2025-3175

A vulnerability was found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /saveusereditprofile.php. The manipulation of the argument firstName leads to sql injection. The attack may be launched...

9.8CVSS0.00416EPSS
Exploits0References4
CVE
CVE
added 2025/04/03 7:0 p.m.48 views

CVE-2025-3175

The CVE-2025-3175 entry concerns Project Worlds Online Lawyer Management System 1.0 where the vulnerability exists in /save_user_edit_profile.php. The root cause is the manipulation of the first_Name parameter, leading to SQL injection. The issue can be exploited remotely and the exploit has been...

9.8CVSS7.6AI score0.00416EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2025/04/03 7:0 p.m.9 views

CVE-2025-3175 Project Worlds Online Lawyer Management System save_user_edit_profile.php sql injection

A vulnerability was found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /saveusereditprofile.php. The manipulation of the argument firstName leads to sql injection. The attack may be launched...

7.5CVSS0.00416EPSS
Exploits0References4
Circl
Circl
added 2024/07/17 2:19 a.m.1 views

CVE-2024-3175

creationtimestamp| type| source ---|---|--- 2024-07-17 02:19:50+00:00| seen| https://t.me/cvedetector/1025...

8.8CVSS6.2AI score0.00457EPSS
Exploits1References1
OSV
OSV
added 2024/07/16 11:15 p.m.1 views

DEBIAN-CVE-2024-3175

Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Low...

6.3CVSS6.3AI score0.00457EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:0 a.m.13 views

Cisco MDS 9000 Series Switches Denial of Service (CVE-2020-3175)

A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper resource usage control. An...

8.6CVSS8.5AI score0.02588EPSS
Exploits0References2
NVD
NVD
added 2023/07/10 4:15 p.m.7 views

CVE-2023-3175

The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS4.9AI score0.00182EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2023/07/10 12:40 p.m.9 views

CVE-2023-3175 AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting

The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

6.1AI score0.00182EPSS
Exploits2References1
CVE
CVE
added 2023/07/10 12:40 p.m.39 views

CVE-2023-3175

The CVE-2023-3175 entry is supported by multiple connected documents describing a stored Cross-Site Scripting vulnerability in the AI ChatBot WordPress plugin prior to version 4.6.1. The issue arises because certain settings are not adequately escaped, allowing high-privilege users (e.g., admins)...

4.8CVSS4.8AI score0.00182EPSS
Exploits2References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:57 a.m.2 views

SUSE CVE-2010-3175

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

9.3CVSS9.6AI score0.03233EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.2 views

SUSE CVE-2012-0518

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175...

4.7CVSS6.5AI score0.20904EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.1 views

SUSE CVE-2012-3175

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-0518...

4.3CVSS6.5AI score0.003EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/09/13 10:15 a.m.0 views

CVE-2022-3175

Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...

5.3CVSS6AI score0.00232EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/09/13 9:20 a.m.13 views

CVE-2022-3175 Missing Custom Error Page in ikus060/rdiffweb

Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...

5.3CVSS5.5AI score0.00232EPSS
Exploits1References2
CVE
CVE
added 2022/09/13 9:20 a.m.51 views

CVE-2022-3175

CVE-2022-3175 affects the rdiffweb project in the GitHub repository ikus060/rdiffweb prior to version 2.4.2. The vulnerability is a missing custom error page which leads to leakage of error information. The issue is resolved in version 2.4.2. Mitigation: upgrade to 2.4.2 or later. Exploitation de...

5.3CVSS5.2AI score0.00232EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder