Lucene search
K

16 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-24972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kleopatra component before 3.1.12 and before 20.07.80 for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported...

8.8CVSS7.5AI score0.04719EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 3:1 a.m.2 views

CVE-2023-1755

Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

8.4CVSS6.1AI score0.00615EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:55 a.m.2 views

CVE-2023-1762

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

8.8CVSS6.7AI score0.00876EPSS
Exploits1References1
OSV
OSV
added 2024/05/22 5:15 a.m.1 views

CVE-2024-31396

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on...

6.6CVSS6AI score0.00414EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/16 12:0 a.m.5 views

PT-2024-24727 · WordPress · Strong Testimonials

Name of the Vulnerable Software and Affected Versions: Strong Testimonials WordPress plugin versions prior to 3.1.12 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some Testimonia...

4.8CVSS8.3AI score0.00399EPSS
Exploits2References6
CNNVD
CNNVD
added 2023/06/12 12:0 a.m.3 views

WordPress Plugin Icegram Engage 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS6AI score0.00486EPSS
Exploits2References2
CNNVD
CNNVD
added 2023/04/22 12:0 a.m.3 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.12, which can be exploited by an attacker to bypass XSS protection by changing the name of the phpmyfaq user...

5.4CVSS6AI score0.00476EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/04/22 12:0 a.m.3 views

PT-2023-17303 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.12, update to version 3.1.12 ...

5.4CVSS5.4AI score0.00476EPSS
Exploits1References8
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.4 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

8.1CVSS6.5AI score0.00532EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.4 views

phpMyFAQ 访问控制错误漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. An Access Control Error vulnerability exists in versions prior to phpMyFAQ 3.1.12, which stems from improper access control...

5.4CVSS6.3AI score0.00492EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.3 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

6.1CVSS5.5AI score0.00447EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/03/31 12:0 a.m.21 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

8.4CVSS6.5AI score0.00615EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/03/31 12:0 a.m.3 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from the presence of stored cross-site scripting XSS...

8.1CVSS6.2AI score0.00532EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/03/31 12:0 a.m.3 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.12, which stems from improper input neutralization...

4.7CVSS5.4AI score0.00601EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/03/31 12:0 a.m.2 views

PT-2023-17213 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue concerns weak password requirements in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.12, update to version 3.1.12 or later to resolve the...

9.8CVSS9.3AI score0.00724EPSS
Exploits1References9
Packet Storm
Packet Storm
added 2016/12/13 12:0 a.m.54 views

Joomla DT Register SQL Injection

Title: SQL injection in Joomla extension DT Register Credit: Elar Lang / https://security.elarlang.eu Vulnerability: SQL injection Vulnerable version: before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 CVE: pending Full Disclosure URL:...

Exploits0
Rows per page
Query Builder