Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:50 a.m.8 views

CVE-2021-31849

SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...

8.4CVSS7.7AI score0.00395EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:55 p.m.3 views

CVE-2022-31849

MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution RCE vulnerability which is exploitable via a crafted POST request...

8.8CVSS8.3AI score0.01721EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/04/03 3:53 p.m.11 views

CVE-2025-31849

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fbtemplates Nemesis All-in-One nemesis-all-in-one allows Stored XSS.This issue affects Nemesis All-in-One: from n/a through = 1.1.3...

6.5CVSS7.2AI score0.00532EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/01 4:3 p.m.4 views

WordPress Nemesis All-in-One plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin Nemesis All-in-One versions = 1.1.3...

6.5CVSS6.9AI score0.00532EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/04/01 3:16 p.m.3 views

CVE-2025-31849

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fbtemplates Nemesis All-in-One nemesis-all-in-one allows Stored XSS.This issue affects Nemesis All-in-One: from n/a through = 1.1.3...

6.5CVSS0.00532EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.7 views

CVE-2025-31849 WordPress Nemesis All-in-One plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fbtemplates Nemesis All-in-One nemesis-all-in-one allows Stored XSS.This issue affects Nemesis All-in-One: from n/a through = 1.1.3...

6.5CVSS7.2AI score0.00532EPSS
Exploits0References1
Circl
Circl
added 2024/05/10 8:17 a.m.1 views

CVE-2024-31849

creationtimestamp| type| source ---|---|--- 2024-05-10 08:17:13+00:00| published-proof-of-concept| https://t.me/ZeroEthicalCourse/118 2024-05-10 19:37:07+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10480...

9.8CVSS4.8AI score0.9222EPSS
Exploits0References2
Circl
Circl
added 2022/06/16 6:26 p.m.1 views

CVE-2022-31849

creationtimestamp| type| source ---|---|--- 2022-06-16 18:26:30+00:00| seen| https://t.me/cibsecurity/44626...

8.8CVSS8.1AI score0.01721EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/16 3:15 p.m.1 views

CVE-2022-31849

MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution RCE vulnerability which is exploitable via a crafted POST request...

8.8CVSS6.3AI score0.01721EPSS
Exploits1References2
CVE
CVE
added 2022/06/16 2:53 p.m.69 views

CVE-2022-31849

The CVE-2022-31849 issue affects MERCURY MIPC451-4, version 1.0.22 Build 220105 Rel.55642n. A remote code execution (RCE) vulnerability exists exploitable via a crafted POST request. Impacted components: the device firmware; underlying cause is not further specified in the provided documents. CVS...

8.8CVSS8.9AI score0.01721EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2022/04/20 12:0 a.m.11 views

Oracle Solaris has an unspecified vulnerability (CNVD-2022-31849)

Oracle Solaris is a UNIX operating system from Oracle Systems, Inc. A security vulnerability in Oracle Solaris allows a highly privileged attacker to compromise Oracle Solaris by logging into the infrastructure where Oracle Solaris is executed. A successful attack requires human interaction from...

4CVSS1.9AI score0.00095EPSS
Exploits0References1
Circl
Circl
added 2021/11/01 11:21 p.m.1 views

CVE-2021-31849

creationtimestamp| type| source ---|---|--- 2021-11-01 23:21:32+00:00| seen| https://t.me/cibsecurity/31574...

8.4CVSS7AI score0.00395EPSS
Exploits0References1
NVD
NVD
added 2021/11/01 8:15 p.m.15 views

CVE-2021-31849

SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...

8.4CVSS0.00395EPSS
Exploits0References1
CVE
CVE
added 2021/11/01 7:25 p.m.65 views

CVE-2021-31849

CVE-2021-31849 describes a SQL injection in the McAfee Data Loss Prevention (DLP) ePO extension (prior to 11.7.100). An administrator logged into ePO can inject arbitrary SQL into the ePO database via the DLP extension’s user management section. Affected product: McAfee DLP ePO extension before 1...

8.4CVSS7.7AI score0.00395EPSS
Exploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2017/07/02 2:45 a.m.10 views

wienerlinien.at XSS vulnerability

Vulnerable URL: https://www.wienerlinien.at/eportal3/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31849 VIP website status:| Yes Check...

6.2AI score
Exploits0
Rows per page
Query Builder