Lucene search
K

62 matches found

OSV
OSV
•added 2026/06/06 4:6 a.m.•3 views

MINI-4887-9C5F-3457

Bulletin has no description...

6.1CVSS5.2AI score0.00178EPSS
Exploits0
Circl
Circl
•added 2026/03/27 11:16 a.m.•2 views

CVE-2026-3457

creationtimestamp| type| source ---|---|--- 2026-03-27 11:16:46+00:00| seen| Telegram/hnc41FvgR2VyITu4BVl6HabBwFPEZ-H6ltaZ3k0o3hEQc60 2026-03-27 12:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi25ffwdni2q...

8.3CVSS4.8AI score0.00137EPSS
Exploits0References1
EUVD
EUVD
•added 2026/01/20 11:53 a.m.•3 views

EUVD-2026-3457

HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/categoryproductsearch', affecting the 'productname' parameter...

5.1CVSS5.5AI score0.00262EPSS
Exploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 11:4 p.m.•6 views

CVE-2022-3457

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

9.8CVSS6.8AI score0.00317EPSS
Exploits0References1
Circl
Circl
•added 2025/04/22 12:3 p.m.•8 views

CVE-2025-3457

creationtimestamp| type| source ---|---|--- 2025-04-22 12:03:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12837 2025-04-22 15:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxboafap2r 2025-04-22 16:43:53+00:00| seen|...

6.4CVSS8.7AI score0.00238EPSS
Exploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/22 11:12 a.m.•13 views

CVE-2025-3457 Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'oceanwpicon' shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.9AI score0.00238EPSS
Exploits0References5
Cvelist
Cvelist
•added 2025/04/22 11:12 a.m.•14 views

CVE-2025-3457 Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'oceanwpicon' shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00238EPSS
Exploits0References5
CVE
CVE
•added 2025/04/22 11:12 a.m.•65 views

CVE-2025-3457

The CVE-2025-3457 entry describes a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress Ocean Extra plugin (versions up to and including 2.4.6) that is exploitable by authenticated attackers with contributor-level access and above via the oceanwp_icon shortcode. The issue arises from...

6.4CVSS5.7AI score0.00238EPSS
Exploits0References5Affected Software1
Patchstack
Patchstack
•added 2025/04/22 2:4 a.m.•10 views

WordPress Ocean Extra plugin <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin Ocean Extra versions = 2.4.6...

6.4CVSS6.3AI score0.00238EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2024/09/27 12:0 a.m.•6 views

SUSE: Security Advisory (SUSE-SU-2024:3457-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.5AI score0.01127EPSS
Exploits0References7
Vulnrichment
Vulnrichment
•added 2024/04/08 5:31 p.m.•14 views

CVE-2024-3457 Netentsec NS-ASG Application Security Gateway config_ISCGroupNoCache.php sql injection

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/configISCGroupNoCache.php. The manipulation of the argument GroupId leads to sql injection. It is possible to initiate the attack remotely. T...

6.5CVSS7.4AI score0.0068EPSS
Exploits1References4
Circl
Circl
•added 2023/06/29 6:14 p.m.•4 views

CVE-2023-3457

creationtimestamp| type| source ---|---|--- 2023-06-29 18:14:30+00:00| seen| https://t.me/cibsecurity/65725 2024-01-03 22:54:24+00:00| seen| https://t.me/arpsyndicate/2375...

9.8CVSS6.9AI score0.00767EPSS
Exploits1References2
CVE
CVE
•added 2023/06/29 1:31 p.m.•32 views

CVE-2023-3457

The CVE-2023-3457 entry concerns SourceCodester Shopping Website 1.0, with a vulnerability in the index.php file where manipulating the username parameter enables SQL injection. This allows remote exploitation and the exploit has been disclosed publicly. Affected component: index.php function han...

9.8CVSS8.3AI score0.00767EPSS
Exploits1References3Affected Software1
NVD
NVD
•added 2022/10/13 8:15 p.m.•32 views

CVE-2022-3457

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

9.8CVSS0.00317EPSS
Exploits0References2
Vulnrichment
Vulnrichment
•added 2022/10/13 12:0 a.m.•4 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS9.5AI score0.00317EPSS
Exploits0References2
Cvelist
Cvelist
•added 2022/10/13 12:0 a.m.•30 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS9.8AI score0.00317EPSS
Exploits0References2
OSV
OSV
•added 2022/10/13 12:0 a.m.•23 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS4.7AI score0.00317EPSS
Exploits0References4
CVE
CVE
•added 2022/10/13 12:0 a.m.•67 views

CVE-2022-3457

CVE-2022-3457 documents an Origin Validation Error in the rdiffweb project by ikus060, prior to version 2.5.0a5. The issue arises from improper origin validation in web traffic, enabling an access-control-related vulnerability. Public references in GHSA and OSV entries corroborate the same adviso...

9.8CVSS6.7AI score0.00317EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2022/09/29 12:0 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2022:3457-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7.9AI score0.02037EPSS
Exploits0References10
Circl
Circl
•added 2021/07/06 10:20 a.m.•2 views

CVE-2021-3457

creationtimestamp| type| source ---|---|--- 2021-07-06 10:20:12+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/2703...

6.1CVSS6.1AI score0.00242EPSS
Exploits0References1
Rows per page
Query Builder