Lucene search
K

19 matches found

EUVD
EUVD
added 2025/11/10 4:40 a.m.1 views

EUVD-2025-44025

Malicious code in gita-botok59-pore npm...

6.6AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 7:21 a.m.3 views

CVE-2024-44025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through 3.6.5...

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/06 12:44 p.m.18 views

CVE-2024-44025 WordPress NiceJob plugin < 3.6.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through 3.6.5...

6.5CVSS0.00193EPSS
Exploits0References1
CVE
CVE
added 2024/10/06 12:44 p.m.36 views

CVE-2024-44025

CVE-2024-44025: WordPress NiceJob plugin is affected by a Stored XSS due to improper input neutralization during web page generation in versions before 3.6.5. Affected: NiceJob WordPress plugin

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/06 12:44 p.m.11 views

CVE-2024-44025 WordPress NiceJob plugin < 3.6.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicejob NiceJob nicejob allows Stored XSS.This issue affects NiceJob: from n/a through 3.6.5...

6.5CVSS5.9AI score0.00193EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/09/24 12:0 a.m.10 views

WordPress NiceJob Plugin < 3.6.5 is vulnerable to Cross Site Scripting (XSS)

Software NiceJob Type Plugin Vulnerable versions 3.6.5 Fixed in 3.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-44025 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID afa3856f254d Credits stealthcopter Required privilege Contributor...

6.5CVSS6.8AI score0.00193EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/11/02 1:22 a.m.1 views

CVE-2023-44025

creationtimestamp| type| source ---|---|--- 2023-11-02 01:22:05+00:00| seen| https://t.me/cibsecurity/73393...

9.8CVSS8.7AI score0.02604EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/01 12:0 a.m.14 views

CVE-2023-44025

SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component...

8.6AI score0.02604EPSS
Exploits0References1
CVE
CVE
added 2023/11/01 12:0 a.m.42 views

CVE-2023-44025

CVE-2023-44025 affects the Addifyfreegifts plugin (version 1.0.2 and earlier) with a SQL injection in the getrulebyid function inside AddifyfreegiftsModel.php. This vulnerability can allow a remote attacker to execute arbitrary code, as indicated by the documented impacts (high confidentiality, i...

9.8CVSS9.6AI score0.02604EPSS
Exploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:36 a.m.1 views

SUSE CVE-2021-44025

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...

6.1CVSS6.7AI score0.00629EPSS
Exploits0References3
Circl
Circl
added 2023/01/27 4:39 p.m.0 views

CVE-2022-44025

creationtimestamp| type| source ---|---|--- 2023-01-27 16:39:32+00:00| seen| https://t.me/cibsecurity/57038...

6.1CVSS6.1AI score0.00669EPSS
Exploits0References1
CVE
CVE
added 2023/01/27 12:0 a.m.49 views

CVE-2022-44025

NetScout nGeniusONE 6.3.2 before P10 exposes a Reflected Cross-Site Scripting (XSS) vulnerability (CVE-2022-44025) with CVSS v3.1 base score 6.1 (MEDIUM). The Connected documents confirm affected software/version and the XSS class, but do not provide exploitation details or a concrete remediation...

6.1CVSS6.1AI score0.00669EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/27 12:0 a.m.4 views

CVE-2022-44025

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 2 of 6...

6.2AI score0.00669EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/12/04 12:0 a.m.20 views

Fedora: Security Advisory for roundcubemail (FEDORA-2021-43d3c10590)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.72527EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2021/11/29 12:0 a.m.41 views

Debian DSA-5013-1 : roundcube - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5013 advisory. - Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...

9.8CVSS8.2AI score0.72527EPSS
Exploits1References9
OpenVAS
OpenVAS
added 2021/11/28 12:0 a.m.22 views

Debian: Security Advisory (DSA-5013-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.72527EPSS
Exploits1References6
Debian
Debian
added 2021/11/27 9:47 a.m.35 views

[SECURITY] [DSA 5013-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5013-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 27, 2021 https://www.debian.org/security/faq -...

9.8CVSS9AI score0.72527EPSS
Exploits1
Circl
Circl
added 2021/11/19 7:16 a.m.2 views

CVE-2021-44025

creationtimestamp| type| source ---|---|--- 2021-11-19 07:16:26+00:00| seen| https://t.me/cibsecurity/32673...

6.1CVSS7.1AI score0.00629EPSS
Exploits0References1
CVE
CVE
added 2021/11/19 3:47 a.m.108 views

CVE-2021-44025

Roundcube webmail vulnerability CVE-2021-44025 (XSS) and CVE-2021-44026 (SQL injection) affect Roundcube before 1.3.17 and 1.4.x before 1.4.12. The XSS is triggered by handling an attachment filename extension in a MIME type warning message; the SQLi affects search/search_params handling. Publicl...

6.1CVSS7.2AI score0.00629EPSS
Exploits0References8Affected Software1
Rows per page
Query Builder