Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-31815

Malicious code in bioql PyPI...

6.6AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:09 a.m.•19 views

CVE-2024-31815

In TOTOLINK EX200 V4.0.3c.7314B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh...

9.1CVSS7AI score0.00584EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/01 3:16 p.m.•12 views

CVE-2025-31815

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devscred Design Blocks exclusive-blocks allows Stored XSS.This issue affects Design Blocks: from n/a through = 1.2.5...

6.5CVSS0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 2:51 p.m.•8 views

CVE-2025-31815 WordPress Design Blocks plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devscred Design Blocks allows Stored XSS. This issue affects Design Blocks: from n/a through 1.2.2...

6.5CVSS6.9AI score0.0036EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 2:51 p.m.•59 views

CVE-2025-31815

CVE-2025-31815 : Stored Cross-Site Scripting in Design Blocks for WordPress (Design Blocks Gutenberg Blocks collection). Root cause: improper neutralization of input during web page generation. Affected: Design Blocks versions up to and including 1.2.2. Impact: stored XSS that can affect site vis...

6.5CVSS7.2AI score0.0036EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 2:51 p.m.•26 views

CVE-2025-31815 WordPress Design Blocks plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devscred Design Blocks exclusive-blocks allows Stored XSS.This issue affects Design Blocks: from n/a through = 1.2.5...

6.5CVSS0.0036EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/08 12:00 a.m.•70 views

CVE-2024-31815

The TOTOLINK EX200 (specifically version V4.0.3c.7314_B20191204 ) is vulnerable to an authorization bypass flaw in the /cgi-bin/ExportSettings.sh script. This issue stems from improper privilege management and the use of a user-controlled key , which allows an attacker to bypass security restrict...

9.1CVSS6.8AI score0.00584EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/28 1:52 a.m.•45 views

CVE-2021-31815

GAEN aka Google/Apple Exposure Notifications through 2021-04-27 on Android allows attackers to obtain sensitive information, such as a user's location history, in-person social graph, and sometimes COVID-19 infection status, because Rolling Proximity Identifiers and MAC addresses are written to t...

4.2AI score0.00131EPSS
SaveExploits1References2
CVE
CVE
•added 2021/04/28 1:52 a.m.•160 views

CVE-2021-31815

CVE-2021-31815 affects GAEN (Google/Apple Exposure Notifications) on Android up to 2021-04-27. The vulnerability stems from Rolling Proximity Identifiers and MAC addresses being written to the Android system log, enabling attackers to potentially access sensitive user data such as location histor...

3.3CVSS4AI score0.00131EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder