Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:11 p.m.7 views

CVE-2022-36502

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams...

7.8CVSS7.9AI score0.00133EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:2 p.m.4 views

CVE-2020-36502

Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting XSS vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself...

6.1CVSS6.2AI score0.0024EPSS
Exploits1
NVD
NVD
added 2024/06/14 8:15 a.m.18 views

CVE-2024-36502

Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability...

7.9CVSS0.0005EPSS
Exploits0References1
Circl
Circl
added 2023/07/25 6:26 p.m.1 views

CVE-2023-36502

creationtimestamp| type| source ---|---|--- 2023-07-25 18:26:55+00:00| seen| https://t.me/cibsecurity/67240...

7.1CVSS7.1AI score0.00121EPSS
Exploits0References1
NVD
NVD
added 2023/07/25 2:15 p.m.9 views

CVE-2023-36502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...

7.1CVSS6.9AI score0.00121EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/25 1:26 p.m.12 views

CVE-2023-36502 WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...

7.1CVSS7.1AI score0.00121EPSS
Exploits0References1
CVE
CVE
added 2023/07/25 1:26 p.m.31 views

CVE-2023-36502

CVE-2023-36502: WordPress Balkon Theme

7.1CVSS6.7AI score0.00121EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/25 1:26 p.m.13 views

CVE-2023-36502 WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...

7.1CVSS6.9AI score0.00121EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/06/23 12:0 a.m.7 views

WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Balkon Type Theme Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36502 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 90ca41d6439b Credits RE-ALTER Required privilege...

7.1CVSS5.6AI score0.00121EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/08/25 6:23 p.m.0 views

CVE-2022-36502

creationtimestamp| type| source ---|---|--- 2022-08-25 18:23:22+00:00| seen| https://t.me/cibsecurity/48719...

7.8CVSS7.5AI score0.00133EPSS
Exploits1References1
CVE
CVE
added 2022/08/25 1:58 p.m.46 views

CVE-2022-36502

CVE-2022-36502 concerns the H3C Magic NX18 Plus NX18PV100R003 router, where a stack overflow in the function UpdateWanParams() is reported. The vulnerability is characterized by a local attack vector, low privileges required, and no user interaction, with potential impact to confidentiality, inte...

7.8CVSS7.8AI score0.00133EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/25 1:58 p.m.14 views

CVE-2022-36502

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams...

8AI score0.00133EPSS
Exploits1References1
Circl
Circl
added 2021/10/23 12:39 a.m.0 views

CVE-2020-36502

creationtimestamp| type| source ---|---|--- 2021-10-23 00:39:43+00:00| seen| https://t.me/cibsecurity/31072...

6.1CVSS6.1AI score0.0024EPSS
Exploits1References1
OSV
OSV
added 2021/10/22 8:15 p.m.0 views

CVE-2020-36502

Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting XSS vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself...

6.1CVSS5.9AI score
Exploits0References1
CVE
CVE
added 2021/10/22 7:19 p.m.37 views

CVE-2020-36502

CVE-2020-36502 describes an XSS vulnerability in Swift File Transfer Mobile v1.1.2, caused by the devicename parameter. The issue allows an attacker to inject and execute arbitrary web scripts or HTML when the device name is crafted, as indicated by multiple connected sources. Documented details ...

6.1CVSS6AI score0.0024EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder