15 matches found
CVE-2021-31849
SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...
CVE-2022-31849
MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution RCE vulnerability which is exploitable via a crafted POST request...
CVE-2025-31849
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fbtemplates Nemesis All-in-One nemesis-all-in-one allows Stored XSS.This issue affects Nemesis All-in-One: from n/a through = 1.1.3...
WordPress Nemesis All-in-One plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin Nemesis All-in-One versions = 1.1.3...
CVE-2025-31849
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fbtemplates Nemesis All-in-One nemesis-all-in-one allows Stored XSS.This issue affects Nemesis All-in-One: from n/a through = 1.1.3...
CVE-2025-31849 WordPress Nemesis All-in-One plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fbtemplates Nemesis All-in-One nemesis-all-in-one allows Stored XSS.This issue affects Nemesis All-in-One: from n/a through = 1.1.3...
CVE-2024-31849
creationtimestamp| type| source ---|---|--- 2024-05-10 08:17:13+00:00| published-proof-of-concept| https://t.me/ZeroEthicalCourse/118 2024-05-10 19:37:07+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10480...
CVE-2022-31849
creationtimestamp| type| source ---|---|--- 2022-06-16 18:26:30+00:00| seen| https://t.me/cibsecurity/44626...
CVE-2022-31849
MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution RCE vulnerability which is exploitable via a crafted POST request...
CVE-2022-31849
The CVE-2022-31849 issue affects MERCURY MIPC451-4, version 1.0.22 Build 220105 Rel.55642n. A remote code execution (RCE) vulnerability exists exploitable via a crafted POST request. Impacted components: the device firmware; underlying cause is not further specified in the provided documents. CVS...
Oracle Solaris has an unspecified vulnerability (CNVD-2022-31849)
Oracle Solaris is a UNIX operating system from Oracle Systems, Inc. A security vulnerability in Oracle Solaris allows a highly privileged attacker to compromise Oracle Solaris by logging into the infrastructure where Oracle Solaris is executed. A successful attack requires human interaction from...
CVE-2021-31849
creationtimestamp| type| source ---|---|--- 2021-11-01 23:21:32+00:00| seen| https://t.me/cibsecurity/31574...
CVE-2021-31849
SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...
CVE-2021-31849
CVE-2021-31849 describes a SQL injection in the McAfee Data Loss Prevention (DLP) ePO extension (prior to 11.7.100). An administrator logged into ePO can inject arbitrary SQL into the ePO database via the DLP extension’s user management section. Affected product: McAfee DLP ePO extension before 1...
wienerlinien.at XSS vulnerability
Vulnerable URL: https://www.wienerlinien.at/eportal3/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31849 VIP website status:| Yes Check...