Lucene search
K

49 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:58 a.m.5 views

CVE-2020-7197

SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console SSMC 3.7.0.0 is an off node multiarray manager web application and remains isolated from data on the managed arrays. HPE has provided an update to HPE StoreServ Management Console SSMC software 3.7.0.0...

9.8CVSS7.3AI score0.0205EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-7197 Malicious code in @crabas0npm/blanditiis-iure-voluptates (npm)

The package @crabas0npm/blanditiis-iure-voluptates was found to contain malicious code...

7.2AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/07/08 9:32 p.m.2 views

CVE-2025-7197 code-projects Jonnys Liquor delete-row.php sql injection

A vulnerability classified as critical has been found in code-projects Jonnys Liquor 1.0. This affects an unknown part of the file /admin/delete-row.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

7.5CVSS7.7AI score0.00204EPSS
Exploits1References5
CVE
CVE
added 2025/07/08 9:32 p.m.14 views

CVE-2025-7197

CVE-2025-7197 — Jonnys Liquor 1.0 is affected by a SQL injection in the /admin/delete-row.php file, triggered by manipulating the ID parameter. The root cause is lack of validation/sanitization of externally supplied SQL statements in that parameter, enabling remote exploitation with publicly dis...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/05/15 8:15 p.m.4 views

CVE-2023-7197

The Marketing Twitter Bot WordPress plugin through 1.11 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

7.1CVSS0.00117EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2025/05/15 8:9 p.m.5 views

CVE-2023-7197 Marketing Twitter Bot <= 1.11 - Settings Update to Stored XSS via CSRF

The Marketing Twitter Bot WordPress plugin through 1.11 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

5.8AI score0.00117EPSS
Exploits2References1
Cvelist
Cvelist
added 2025/05/15 8:9 p.m.11 views

CVE-2023-7197 Marketing Twitter Bot <= 1.11 - Settings Update to Stored XSS via CSRF

The Marketing Twitter Bot WordPress plugin through 1.11 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

0.00117EPSS
Exploits2References1
CVE
CVE
added 2025/05/15 8:9 p.m.45 views

CVE-2023-7197

CVE-2023-7197 affects Marketing Twitter Bot WordPress plugin (

7.1CVSS8.9AI score0.00117EPSS
Exploits2References1Affected Software1
Circl
Circl
added 2024/07/29 3:27 p.m.0 views

CVE-2024-7197

creationtimestamp| type| source ---|---|--- 2024-07-29 15:27:19+00:00| seen| https://t.me/cvedetector/1840...

8.8CVSS6.2AI score0.00197EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/07/29 11:31 a.m.15 views

CVE-2024-7197 SourceCodester Complaints Report Management System manage_complaint.php sql injection

A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/managecomplaint.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

6.5CVSS0.00197EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:14 a.m.2 views

SUSE CVE-2015-7197

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code...

5CVSS6.8AI score0.01832EPSS
Exploits0References9
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.20 views

Mozilla Firefox Security Advisory (MFSA2015-132) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

5CVSS9.6AI score0.01832EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2015:1981-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.11044EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2015:1978-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.11044EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2015:1926-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.11044EPSS
Exploits0References5
CVE
CVE
added 2020/10/26 3:9 p.m.34 views

CVE-2020-7197

CVE-2020-7197 affects HPE StoreServ Management Console (SSMC) 3.7.0.0. The Red Hat/NVD entries describe a remote authentication bypass vulnerability in SSMC web application, which is used to manage 3PAR StoreServ systems. The root cause is an authentication bypass in the SSMC interface, enabling ...

9.8CVSS9.5AI score0.0205EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2020/10/25 3:55 p.m.3 views

CVE-2020-7197

creationtimestamp| type| source ---|---|--- 2020-10-25 15:55:33+00:00| seen| https://t.me/cKure/2605...

9.8CVSS8.7AI score0.0205EPSS
Exploits0References1
CVE
CVE
added 2019/12/04 4:45 p.m.48 views

CVE-2019-7197

CVE-2019-7197 is a stored cross-site scripting (XSS) vulnerability affecting multiple QTS versions. The issue could allow injection and execution of scripts in the administrator console via QTS Event Notification. Remediation per sources is to update QTS to the latest version. Technical specifics...

4.8CVSS4.9AI score0.00305EPSS
Exploits0References1Affected Software1
Veracode
Veracode
added 2019/05/02 5:43 a.m.38 views

Privilege Escalation

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

7.5CVSS9.3AI score0.03921EPSS
Exploits0References25Affected Software2
Veracode
Veracode
added 2019/05/02 5:43 a.m.24 views

Buffer Overflow

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

7.5CVSS9.3AI score0.03921EPSS
Exploits0References25Affected Software2
Rows per page
Query Builder