35 matches found
MINI-6884-5H53-GVVM
Bulletin has no description...
MINI-6884-V453-X84G
Bulletin has no description...
CVE-2025-6884
creationtimestamp| type| source ---|---|--- 2025-06-30 03:57:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19897 2025-06-30 06:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsslw2mdi22i...
CVE-2025-6884 code-projects Staff Audit System search_index.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /searchindex.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2024-6884
The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.39 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...
CVE-2024-6884 Gutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSS
The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.39 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...
CVE-2024-6884 Gutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSS
The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.39 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...
WordPress Gutenberg Blocks by Kadence Blocks Plugin < 3.2.39 is vulnerable to Cross Site Scripting (XSS)
Software Gutenberg Blocks by Kadence Blocks Type Plugin Vulnerable versions 3.2.39 Fixed in 3.2.39 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6884 Patch priority Low CVSS severity Low 6.5 Developer KadenceWP PSID b202b4bfd879 Credits Dmitrii...
Ubuntu: Security Advisory (USN-6884-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Nova vulnerability (USN-6884-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6884-1 advisory. Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image processing. An authenticated user could use this issue to...
CVE-2023-6884
creationtimestamp| type| source ---|---|--- 2024-02-09 21:17:11+00:00| seen| https://t.me/ctinow/182243...
CVE-2023-6884
CVE-2023-6884 affects the WordPress Plugin for Google Reviews (widget-google-reviews) up to version 3.1. Root cause: insufficient input sanitization and output escaping on the place_id attribute used by the shortcode, enabling Stored Cross-Site Scripting. Impact: authenticated users with contribu...
Zyxel Router Command Injection Vulnerability (CVE-2017-6884)
According to its model number and firmware revision, the remote Zyxel Router is affected by a command injection vulnerability within nslookup funciton of the diagnostic tools. An authenticated, remote attacker can exploit this, via various crafted HTTP commands, to execute arbitrary commands...
CVE-2020-6884
CVE-2020-6884 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-6884
...
Zyxel EMG2926 Router OS Command Injection (CVE-2017-6884)
A command injection vulnerability exists in Zyxel EMG2926. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the router...
CVE-2017-6884
creationtimestamp| type| source ---|---|--- 2018-07-30 08:48:18+00:00| seen| MISP/5b5ece74-a5c8-40cd-87d6-d789950d210f 2020-01-08 13:22:45+00:00| seen| MISP/5e15d698-a3b4-40fd-86e7-15cc02de0b81 2020-10-09 14:13:46+00:00| seen| MISP/b6fb39e0-8665-41f9-bc21-88d7f1945ec4 2020-10-09 16:07:57+00:00|...
CVE-2015-6884
...
CVE-2015-6884
CVE-2015-6884 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-6884
The CVE-2017-6884 issue affects Zyxel EMG2926 routers (firmware around V1.00(AAQT.4)b8). The vulnerability is a command injection in the nslookup diagnostic tool that an authenticated, remote attacker can exploit via crafted HTTP requests (e.g., manipulating the ping_ip parameter in expert/mainte...