Lucene search
K

9 matches found

NVD
NVD
added 5 days ago7 views

CVE-2026-46477

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, dataset create and update mass-assignment allows cross-workspace dataset takeover. This issue has been patched in version 3.1.2...

7.7CVSS0.00053EPSS
Exploits0References2
Circl
Circl
added 2026/05/14 2:18 p.m.6 views

CVE-2026-46477

creationtimestamp| type| source ---|---|--- 2026-05-14 14:18:06+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5h9v-837x-m97r 2026-06-08 17:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns75tvowx2z...

7.7CVSS5.3AI score0.00053EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/04/24 5:29 p.m.5 views

WordPress WP Customize Login Page plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin WP Customize Login Page versions = 1.6.5...

5.9CVSS6.8AI score0.00109EPSS
Exploits0Affected Software1
Circl
Circl
added 2025/04/24 5:6 p.m.1 views

CVE-2025-46477

creationtimestamp| type| source ---|---|--- 2025-04-24 17:06:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13298...

5.9CVSS8.7AI score0.00109EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/24 4:9 p.m.13 views

CVE-2025-46477 WordPress WP Customize Login Page plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Carlo La Pera WP Customize Login Page wp-customize-login-page allows Stored XSS.This issue affects WP Customize Login Page: from n/a through = 1.6.5...

5.9CVSS0.00109EPSS
Exploits0References1
Circl
Circl
added 2022/01/25 7:18 a.m.1 views

CVE-2021-46477

creationtimestamp| type| source ---|---|--- 2022-01-25 07:18:06+00:00| seen| https://t.me/cibsecurity/36179...

5.5CVSS5.5AI score0.00193EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/25 1:15 a.m.3 views

CVE-2021-46477

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

5.5CVSS6.2AI score0.00193EPSS
Exploits1References2
OSV
OSV
added 2022/01/25 1:15 a.m.1 views

CVE-2021-46477

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

5.5CVSS6.1AI score
Exploits0References1
CVE
CVE
added 2022/01/25 12:24 a.m.47 views

CVE-2021-46477

Jsish v3.5.0 contains a heap buffer overflow in RegExp_constructor (src/jsiRegexp.c) that can lead to a Denial of Service (DoS). Connected sources corroborate this vulnerability, but none provide a remediation/version fix within the supplied documents. No exploitation details are present in the p...

5.5CVSS5.7AI score0.00193EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder