Lucene search
K

72 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-4174

Malware in sbrugna...

6.9CVSS6.4AI score0.00093EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-4657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

8.8CVSS8.6AI score0.79432EPSS
Exploits9References2
RedhatCVE
RedhatCVE
added 2025/05/23 12:31 a.m.4 views

CVE-2022-4657

The Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.9AI score0.00198EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:42 p.m.7 views

CVE-2005-4657

Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

7.5CVSS6.9AI score0.02062EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2010-4657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak int...

7.5CVSS7.3AI score0.0157EPSS
Exploits0References2
Circl
Circl
added 2024/09/25 3:59 p.m.0 views

CVE-2024-4657

creationtimestamp| type| source ---|---|--- 2024-09-25 15:59:48+00:00| seen| https://t.me/cvedetector/6313...

9.3CVSS4.8AI score0.00263EPSS
Exploits0References1
NVD
NVD
added 2024/09/25 1:15 p.m.10 views

CVE-2024-4657

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software BAP Automation allows Stored XSS. This issue affects BAP Automation: before 30840...

9.3CVSS0.00263EPSS
Exploits0References2
CVE
CVE
added 2024/09/25 12:37 p.m.39 views

CVE-2024-4657

Talent Software BAP Automation is affected by a Stored XSS due to improper input neutralization during web page generation, impacting versions before 30840. The root cause is improper neutralization of input in web page generation, enabling stored XSS attacks. The PT-Security entry specifies upgr...

9.3CVSS5.8AI score0.00263EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/25 12:37 p.m.11 views

CVE-2024-4657 Strored XSS in Talent Software's BAP Automation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software BAP Automation allows Stored XSS. This issue affects BAP Automation: before 30840...

9.3CVSS5.8AI score0.00263EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/25 12:37 p.m.17 views

CVE-2024-4657 Strored XSS in Talent Software's BAP Automation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software BAP Automation allows Stored XSS. This issue affects BAP Automation: before 30840...

9.3CVSS0.00263EPSS
Exploits0References2
OSV
OSV
added 2024/09/25 1:52 a.m.9 views

CGA-4657-WCPG-QMM9

Bulletin has no description...

4.3CVSS4.2AI score0.00162EPSS
Exploits0
OSV
OSV
added 2024/06/06 12:22 p.m.6 views

CGA-4657-H355-3VJ6

Bulletin has no description...

7.8CVSS7.5AI score0.00083EPSS
Exploits0
Circl
Circl
added 2024/02/13 1:31 p.m.1 views

CVE-2013-4657

creationtimestamp| type| source ---|---|--- 2024-02-13 13:31:18+00:00| seen| https://t.me/ctinow/183801...

10CVSS8.7AI score0.00521EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:55 a.m.1 views

SUSE CVE-2010-4657

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output...

7.5CVSS7.6AI score0.0157EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:2 a.m.2 views

SUSE CVE-2016-4657

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

8.8CVSS9AI score0.79432EPSS
Exploits9References3
Circl
Circl
added 2023/02/06 10:23 p.m.0 views

CVE-2022-4657

creationtimestamp| type| source ---|---|--- 2023-02-06 22:23:24+00:00| seen| https://t.me/cibsecurity/57574...

5.4CVSS5.5AI score0.00198EPSS
Exploits2References1
CVE
CVE
added 2023/02/06 7:59 p.m.64 views

CVE-2022-4657

The Restaurant Menu WordPress plugin (versions before 2.3.6) is vulnerable to Stored XSS via shortcode attributes. The root cause is that certain shortcode attributes are not validated or escaped before being output in the page/post, enabling users with the Contributor role or higher to inject ma...

5.4CVSS5.3AI score0.00198EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2023/02/06 7:59 p.m.12 views

CVE-2022-4657 Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode

The Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.5AI score0.00198EPSS
Exploits2References1
Patchstack
Patchstack
added 2023/01/05 12:0 a.m.7 views

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions 2.3.6 Fixed in 2.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4657 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSI...

5.4CVSS5.6AI score0.00198EPSS
Exploits2References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/24 10:1 p.m.23 views

Ansible Code Injection Vulnerability

The safeeval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657...

9.8CVSS7.9AI score0.10105EPSS
Exploits0References10Affected Software1
Rows per page
Query Builder