Lucene search
+L

109 matches found

CVE
CVE
added 2024/05/06 2:0 a.m.74 views

CVE-2024-4514

CVE-2024-4514 affects Campcodes Complete Web-Based School Management System 1.0 . The vulnerability is in the file /view/timetable_insert_form.php, where manipulating the grade argument can trigger a cross-site scripting (XSS) vulnerability. The issue is exploitable remotely, and exploits have be...

6.1CVSS6.2AI score0.0064EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.15 views

openSUSE: Security Advisory for strongswan (SUSE-SU-2023:4514-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.02309EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/27 5:15 p.m.25 views

CVE-2023-4514

The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS0.00419EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/11/27 4:22 p.m.34 views

CVE-2023-4514 Mmm Simple File List <= 2.3 - Contributor+ Stored XSS

The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.5AI score0.00419EPSS
SaveExploits2References1
CVE
CVE
added 2023/11/27 4:22 p.m.74 views

CVE-2023-4514

CVE-2023-4514 affects the Mmm Simple File List WordPress plugin (versions

5.4CVSS5.5AI score0.00419EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2023/11/08 12:0 a.m.14 views

WordPress Mmm Simple File List Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Software Mmm Simple File List Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4514 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2751f94a869f Credits Erwan LR WPScan Require...

5.4CVSS5.7AI score0.00419EPSS
SaveExploits2References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:0 a.m.24 views

Moxa PT-7728 Series Switch Improper Authorization (CVE-2016-4514)

Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

7.7CVSS7.4AI score0.00946EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:44 a.m.7 views

SUSE CVE-2012-4514

rendering/renderreplaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted web page, related to "trying to reuse a frame with a null part."...

5CVSS6.7AI score0.09698EPSS
SaveExploits6References3
CVE
CVE
added 2022/12/15 12:0 a.m.50 views

CVE-2022-4514

CVE-2022-4514 affects Opencaching Deutschland oc-server3. The vulnerability is a cross-site scripting flaw in an unknown function of the file htdocs/lang/de/ocstyle/varset.inc.php, exploitable remotely via the varvalue parameter. The public exploit has been disclosed. A patch named 4bdd6a0e7b7760...

6.1CVSS4.8AI score0.0056EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/15 12:0 a.m.10 views

CVE-2022-4514 Opencaching Deutschland oc-server3 varset.inc.php cross site scripting

A vulnerability, which was classified as problematic, was found in Opencaching Deutschland oc-server3. Affected is an unknown function of the file htdocs/lang/de/ocstyle/varset.inc.php. The manipulation of the argument varvalue leads to cross site scripting. It is possible to launch the attack...

3.5CVSS4.1AI score0.0056EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2014:0140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7AI score0.03181EPSS
SaveExploits10References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2014:0189-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7AI score0.03181EPSS
SaveExploits12References2
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:0 a.m.39 views

CentOS 8 : openssl (CESA-2020:4514)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4514 advisory. - openssl: Integer overflow in RSAZ modular exponentiation on x8664 CVE-2019-1551 Note that Nessus has not tested for this issue but has instead relied only on...

5.3CVSS7AI score0.14298EPSS
SaveExploits0References2
Cloud Foundry
Cloud Foundry
added 2020/11/19 12:0 a.m.31 views

USN-4514-1: libproxy vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of service. CVEs contained in this USN include: CVE-2020-25219. Affected...

7.5CVSS7.6AI score0.04284EPSS
SaveExploits1Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/11/19 12:0 a.m.21 views

RHEL 8 : openssl (RHSA-2020:4514)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4514 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

5.3CVSS7.1AI score0.14298EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2020/09/18 12:0 a.m.21 views

Ubuntu: Security Advisory (USN-4514-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.04284EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.47 views

KB4550930: Windows 10 April 2020 Security Update

The remote Windows host is missing security update 4550930. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

9.3CVSS8.3AI score0.69166EPSS
SaveExploits4References52
CVE
CVE
added 2019/10/04 2:5 p.m.145 views

CVE-2019-4514

CVE-2019-4514 affects IBM Security Key Lifecycle Manager (SKLM) chassis: vulnerable in versions 2.6–3.0.1 where information can be disclosed to unauthorized users. The disclosed data can be used to mount further attacks on the system, per NVD/IBM entries. The issue is a pure information-disclosur...

5.3CVSS4.8AI score0.01312EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/10/02 7:59 p.m.17 views

Security Bulletin: IBM Security Key Lifecycle Manager is affected by information exposure (CVE-2019-4514)

Summary IBM Security Key Lifecycle Manager discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. Vulnerability Details CVEID: CVE-2019-4514 DESCRIPTION: IBM Tivoli Key Lifecycle Manager discloses sensitive information to...

5.3CVSS1AI score0.01312EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2019/09/05 12:0 a.m.106 views

Debian: Security Advisory (DSA-4514-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.05789EPSS
SaveExploits0References4
Rows per page
Query Builder