Lucene search
+L

34872 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•4 views

CVE-2025-23623: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on cf7-cc-avenue-add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through = 1.0...

7.1CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•5 views

CVE-2025-23862: Missing Authorization

Missing Authorization vulnerability in SzMake Contact Form 7 Anti Spambot contact-form-7-anti-spambot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form 7 Anti Spambot: from n/a through = 1.0.1...

5.3CVSS5.9AI score0.0059EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/01/16 12:00 a.m.•54 views

RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.8.2 (RHSA-2025:0361)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0361 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apac...

9.8CVSS8.5AI score0.31824EPSS
SaveExploits13References6
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•15 views

WordPress plugin Contact Form 7 – CCAvenue Add-on: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

7.1CVSS7.7AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/15 9:25 a.m.•32 views

CVE-2024-12423 Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting

The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

6.1CVSS0.0036EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/01/15 9:25 a.m.•7 views

CVE-2024-12423 Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting

The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

6.1CVSS6AI score0.0036EPSS
SaveExploits0References3
CVE
CVE
•added 2025/01/15 9:25 a.m.•57 views

CVE-2024-12423

CVE-2024-12423 affects the Contact Form 7 Redirect & Thank You Page WordPress plugin. Connected sources confirm a Reflected XSS via the post parameter in all versions up to 1.0.7 due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject scripts on pa...

6.1CVSS6AI score0.0036EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2025/01/15 12:00 a.m.•18 views

CVE-2025-21176

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

8.8CVSS7.3AI score0.02347EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2025/01/15 12:00 a.m.•20 views

CVE-2025-21171

.NET Remote Code Execution Vulnerability...

7.5CVSS7.2AI score0.01698EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2025/01/15 12:00 a.m.•23 views

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability...

7.5CVSS7.2AI score0.01815EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2025/01/15 12:00 a.m.•20 views

CVE-2025-21173

.NET Elevation of Privilege Vulnerability...

7.3CVSS7.1AI score0.01243EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•5 views

CVE-2024-12423: Improper Neutralization of Input During Web Page Generation

The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

6.1CVSS6AI score0.0036EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/15 12:00 a.m.•16 views

WordPress Plugin Contact Form 7: Redirect & Thank You Page Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.1CVSS7.1AI score0.0036EPSS
SaveExploits0References4
Redos
Redos
•added 2025/01/14 12:00 a.m.•22 views

ROS-20250114-12

A vulnerability in the implementation of the Zstandard compression method of the 7-Zip archiver is related to integer overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary code provided that a user opens a specially generated archive. by a user opening a special...

7.8CVSS7.6AI score0.2239EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/01/14 12:00 a.m.•12 views

RHEL 7 : raptor2 (RHSA-2025:0319)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0319 advisory. Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security...

9.3CVSS8.2AI score0.00322EPSS
SaveExploits1References4
CBLMariner
CBLMariner
•added 2025/01/12 9:15 a.m.•57 views

CVE-2022-1941 affecting package grpc 1.42.0-11

CVE-2022-1941 affecting package grpc 1.42.0-11. This CVE either no longer is or was never applicable...

7.5CVSS7.3AI score0.01512EPSS
SaveExploits0
CBLMariner
CBLMariner
•added 2025/01/12 9:15 a.m.•56 views

CVE-2022-4904 affecting package grpc 1.42.0-11

CVE-2022-4904 affecting package grpc 1.42.0-11. This CVE either no longer is or was never applicable...

8.6CVSS8.1AI score0.01222EPSS
SaveExploits1
CBLMariner
CBLMariner
•added 2025/01/12 9:15 a.m.•35 views

CVE-2021-3995 affecting package util-linux 2.32.1-7

CVE-2021-3995 affecting package util-linux 2.32.1-7. This CVE either no longer is or was never applicable...

5.5CVSS6.5AI score0.00637EPSS
SaveExploits3
CBLMariner
CBLMariner
•added 2025/01/12 9:15 a.m.•62 views

CVE-2021-3996 affecting package util-linux 2.32.1-7

CVE-2021-3996 affecting package util-linux 2.32.1-7. This CVE either no longer is or was never applicable...

5.5CVSS6.5AI score0.00641EPSS
SaveExploits3
CBLMariner
CBLMariner
•added 2025/01/12 9:15 a.m.•42 views

CVE-2022-41724 affecting package gcc 9.1.0-7

CVE-2022-41724 affecting package gcc 9.1.0-7. This CVE either no longer is or was never applicable...

7.5CVSS9AI score0.01111EPSS
SaveExploits0
Rows per page
Query Builder