Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.2 views

CVE-2026-32453

Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through 5.15.0...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References1
NVD
NVD
added 2026/03/13 7:55 p.m.1 views

CVE-2026-32453

Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through 5.15.0...

5.3CVSS0.00042EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:36 a.m.4 views

CVE-2024-32453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...

5.9CVSS5.2AI score0.00135EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:57 p.m.5 views

CVE-2022-32453

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...

6.5CVSS7.2AI score0.00182EPSS
Exploits0References1
NVD
NVD
added 2024/04/15 7:15 a.m.7 views

CVE-2024-32453

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...

5.9CVSS5.7AI score0.00135EPSS
Exploits0References1
CVE
CVE
added 2024/04/15 6:27 a.m.49 views

CVE-2024-32453

CVE-2024-32453 : Stored XSS in the POEditor WordPress plugin (

5.9CVSS5.2AI score0.00135EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/15 6:27 a.m.11 views

CVE-2024-32453 WordPress POEditor plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...

5.9CVSS6.7AI score0.00135EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/04/12 12:0 a.m.7 views

WordPress POEditor Plugin <= 0.9.8 is vulnerable to Cross Site Scripting (XSS)

Software POEditor Type Plugin Vulnerable versions = 0.9.8 Fixed in 0.9.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32453 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f8a43c0d4125 Credits Joshua Chan Required privilege Administrator...

5.9CVSS6.9AI score0.00135EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/08/17 12:36 a.m.1 views

CVE-2023-32453

creationtimestamp| type| source ---|---|--- 2023-08-17 00:36:44+00:00| seen| https://t.me/cibsecurity/68691...

4.6CVSS4.6AI score0.00033EPSS
Exploits0References1
OSV
OSV
added 2023/08/16 8:15 p.m.1 views

CVE-2023-32453

Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator...

3.9CVSS5.8AI score0.00033EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/18 8:15 a.m.1 views

CVE-2022-32453

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...

6.5CVSS6.3AI score0.00182EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/08/18 8:15 a.m.2 views

CVE-2022-32453

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...

6.5CVSS6.1AI score0.00182EPSS
Exploits0References2
CVE
CVE
added 2022/08/18 7:13 a.m.49 views

CVE-2022-32453

CVE-2022-32453 affects Cybozu Office 10.0.0–10.8.5. The connected documents describe an HTTP header injection vulnerability in Cybozu Office that could allow a remote attacker to obtain and/or alter product data via unspecified vectors. The root cause is an HTTP header injection issue, and the im...

6.5CVSS6.3AI score0.00182EPSS
Exploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/07/20 12:0 a.m.54 views

JVN#20573662: Multiple vulnerabilities in Cybozu Office

Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-839CyVDB-2300CyVDB-3109 Browse restriction bypass vulnerability in Cabinet CWE-284 - CVE-2022-32283 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N| Base Score: 4....

6.5CVSS5.7AI score0.00203EPSS
Exploits0
CVE
CVE
added 2021/05/17 4:43 p.m.41 views

CVE-2021-32453

CVE-2021-32453 affects SITEL CAP/PRX firmware version 5.2.01. The issue allows a local-network attacker to access the device’s internal configuration database via HTTP without authentication, enabling information disclosure about the device configuration. The connected documents Cornfirm the affe...

6.5CVSS4AI score0.0005EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2008/10/02 12:0 a.m.2 views

CVE-2008-6164

creationtimestamp| type| source ---|---|--- 2008-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32453...

4.3CVSS5.8AI score0.00255EPSS
Exploits1References1
Rows per page
Query Builder