Lucene search
K

58 matches found

Circl
Circl
added 2026/04/05 4:31 a.m.1 views

CVE-2026-5531

creationtimestamp| type| source ---|---|--- 2026-04-05 04:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipw4gb34z27...

6.9CVSS5.9AI score0.00018EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-5531

Malware in sbrugna...

8.8CVSS7.4AI score0.0021EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/06/06 4:14 a.m.8 views

CVE-2025-5531

The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping on user...

6.4CVSS5.9AI score0.00164EPSS
Exploits0References1
NVD
NVD
added 2025/06/04 4:15 a.m.6 views

CVE-2025-5531

The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping on user...

6.4CVSS0.00164EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/06/04 3:40 a.m.9 views

CVE-2025-5531 Staff Directory – Employee Directory for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping on user...

6.4CVSS0.00164EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/04 3:40 a.m.4 views

CVE-2025-5531 Staff Directory – Employee Directory for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emdmbmeta' shortcode in all versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping on user...

6.4CVSS5.8AI score0.00164EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/06/03 8:59 p.m.6 views

WordPress Staff Directory – Employee Directory for WordPress plugin <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Employee Directory – Staff Listing & Team Directory Plugin for WordPress versions = 4.5.0...

6.4CVSS5.5AI score0.00164EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 5:42 p.m.6 views

CVE-2020-5531

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller ModuleQ24DHCCPU-V, Q24DHCCPU-VG User Ethernet port CH1, CH2: First 5 digits of serial number 21121 or before, MELSEC iQ-R Series C Controller Module / C Intelligent Function ModuleR12CCPU-V Ethern...

9.8CVSS7.3AI score0.0077EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:13 a.m.9 views

CVE-2019-5531

VMware vSphere ESXi 6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG and VMware vCenter Server 6.7 prior to 6.7 U1b, 6.5 prior to 6.5 U2b, and 6.0 prior to 6.0 U3j contain an information disclosure vulnerability in clients arising from...

5.8CVSS6.1AI score0.00381EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:38 a.m.5 views

CVE-2013-5531

Cisco Identity Services Engine ISE 1.x before 1.1.1 allows remote attackers to bypass authentication, and read support-bundle configuration and credentials data, via a crafted session on TCP port 443, aka Bug ID CSCty20405...

5CVSS6.9AI score0.00248EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/08/22 12:0 a.m.15 views

Oracle Linux 8 : python3.12-setuptools (ELSA-2024-5531)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5531 advisory. 68.2.2-4 - Security fix for CVE-2024-6345 Resolves: RHEL-50475 Tenable has extracted the preceding description block directly from the Oracle Linux security...

8.8CVSS6.7AI score0.07521EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:0 a.m.12 views

AlmaLinux 8 : python3.12-setuptools (ALSA-2024:5531)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:5531 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...

8.8CVSS7.3AI score0.07521EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:0 a.m.15 views

Rocky Linux 8 : python3.12-setuptools (RLSA-2024:5531)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:5531 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...

8.8CVSS7.3AI score0.07521EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/08/19 12:0 a.m.9 views

RHEL 8 : python3.12-setuptools (RHSA-2024:5531)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5531 advisory. Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially...

8.8CVSS7.6AI score0.07521EPSS
Exploits0References4
NVD
NVD
added 2024/06/11 9:15 a.m.16 views

CVE-2024-5531

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flickr widget in all versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS0.0031EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/11 8:32 a.m.11 views

CVE-2024-5531 Ocean Extra <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flickr Widget

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flickr widget in all versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS5.9AI score0.0031EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/11 8:32 a.m.16 views

CVE-2024-5531 Ocean Extra <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flickr Widget

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flickr widget in all versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS0.0031EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/06/11 12:0 a.m.8 views

WordPress Ocean Extra Plugin <= 2.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Ocean Extra Type Plugin Vulnerable versions = 2.2.8 Fixed in 2.2.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5531 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3783e8eb79e7 Credits wesley wcraft Required...

6.4CVSS5.8AI score0.0031EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2023/10/24 12:0 a.m.21 views

Debian: Security Advisory (DSA-5531-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.3AI score0.83235EPSS
Exploits2References6
Cvelist
Cvelist
added 2023/10/12 5:30 a.m.14 views

CVE-2023-5531 Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the delete functionality. This makes it possible for unauthenticated attackers to delete image...

4.3CVSS4.6AI score0.00069EPSS
Exploits0References3
Rows per page
Query Builder