Lucene search
+L

439 matches found

CNNVD
CNNVD
added 2025/04/11 12:00 a.m.21 views

WordPress plugin WooCommerce Sales MIS Report 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

7.1CVSS7AI score0.00419EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/04/09 12:00 a.m.35 views

CBL Mariner 2.0 Security Update: rabbitmq-server (CVE-2025-30219)

The version of rabbitmq-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30219 advisory. - RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a...

6.1CVSS6.9AI score0.00211EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/06 1:36 p.m.31 views

CVE-2025-31403

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Blind SQL Injection.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

9.3CVSS7.3AI score0.00385EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/04 2:15 p.m.21 views

CVE-2025-31403

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Blind SQL Injection.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

9.3CVSS0.00385EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/04 1:34 p.m.21 views

CVE-2025-31403 WordPress Booking Calendar and Notification plugin <= 4.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Blind SQL Injection.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

9.3CVSS7.3AI score0.00385EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.12 views

WordPress plugin Booking Calendar and Notification 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

6.5CVSS7.1AI score0.0032EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/29 11:59 a.m.15 views

CVE-2025-30899

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpeverest User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through = 4.0.3...

5.9CVSS7.2AI score0.00303EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/03/27 11:15 a.m.5 views

CVE-2025-30899

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpeverest User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through = 4.0.3...

5.9CVSS7.2AI score0.00303EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.31 views

CVE-2025-30899 WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpeverest User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through = 4.0.3...

5.9CVSS0.00303EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/27 12:00 a.m.14 views

PT-2025-13149

Name of the Vulnerable Software and Affected Versions wpeverest User Registration versions n/a through 4.0.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in the User Registration...

5.9CVSS5.2AI score0.00303EPSS
SaveExploits0References6
OSV
OSV
added 2025/03/25 11:15 p.m.7 views

DEBIAN-CVE-2025-30219

RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...

6.1CVSS6.7AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/25 10:55 p.m.249 views

CVE-2025-30219

CVE-2025-30219 describes an XSS in RabbitMQ management UI where an unescaped virtual host name in an error message could allow script execution. Public advisories show patches for Open Source RabbitMQ 4.0.3 and Tanzu RabbitMQ 4.0.3, and 3.13.8. OpenSUSE/SUSE advisories (SUSE-SU-2025:01466-1; SUSE...

6.1CVSS6.7AI score0.00211EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/25 10:55 p.m.16 views

CVE-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI

RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...

6.1CVSS6.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/03/25 12:00 a.m.5 views

PT-2025-12833

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.0.3 Tanzu RabbitMQ versions prior to 4.0.3 and 3.13.8 Description RabbitMQ is a messaging and streaming broker. A sophisticated attack could modify the virtual host name on disk, making it unrecoverable and leading...

6.1CVSS6.7AI score0.00211EPSS
SaveExploits0References23
vulnersOsv
vulnersOsv
added 2025/03/20 12:32 p.m.4 views

ado-sfttrainer (>=1.0.1, <=1.8.7), aim-mlflow (>=0.1.0, <=0.2.1) +27 more potentially affected by CVE-2025-0190 via aim (>=3.17.4, <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2025-0190 Source advisory: SNYK:PYTHON-AIM-9510937...

7.5CVSS7.3AI score0.00616EPSS
SaveExploits1
OSV
OSV
added 2025/03/10 6:31 p.m.12 views

GHSA-V2MW-5MCH-W8C5 canvg Prototype Pollution vulnerability

An issue in canvg prior to v.4.0.3 and v3.0.11 can lead to prototype pollution via the Constructor of the class StyleElement...

9.3CVSS6.7AI score0.00707EPSS
SaveExploits1References5
NVD
NVD
added 2025/03/05 5:15 p.m.11 views

CVE-2024-11035

Carbon Black Cloud Windows Sensor, prior to 4.0.3, may be susceptible to an Information Leak vulnerability, which s a type of issue whereby sensitive information may b exposed due to a vulnerability in software...

2.5CVSS0.00156EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/05 4:56 p.m.55 views

CVE-2024-11035

CVE-2024-11035 affects Broadcom/Cisco? Carbon Black Cloud Windows Sensor prior to version 4.0.3. The issue is described as an Information Leak that may expose sensitive information due to a software vulnerability. Connected sources confirm the product and affected version range but do not provide...

2.5CVSS6.6AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/05 4:56 p.m.22 views

CVE-2024-11035 Carbon Black Cloud Windows Sensor Information Leak

Carbon Black Cloud Windows Sensor, prior to 4.0.3, may be susceptible to an Information Leak vulnerability, which s a type of issue whereby sensitive information may b exposed due to a vulnerability in software...

2.5CVSS0.00156EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/05 12:00 a.m.8 views

Broadcom Carbon Black Cloud Windows Sensor 安全漏洞

Broadcom Carbon Black Cloud Windows Sensor is a cloud-based sensor software for Windows systems from Broadcom, Inc. It is used to protect devices from malware, threats, and events. A security vulnerability exists in Broadcom Carbon Black Cloud Windows Sensor versions prior to 4.0.3 that stems fro...

2.5CVSS6.2AI score0.00156EPSS
SaveExploits0References2
Rows per page
Query Builder