Lucene search
+L

642 matches found

Positive Technologies
Positive Technologies
added 2024/08/25 12:00 a.m.16 views

PT-2024-38840 · Sourcecodester · Sourcecodester Qr Code Bookmark System

Name of the Vulnerable Software and Affected Versions: SourceCodester QR Code Bookmark System version 1.0 Description: A vulnerability was found in the system, affecting some unknown processing of the file /endpoint/delete-bookmark.php. The manipulation of the bookmark argument leads to cross-sit...

5.4CVSS4.4AI score0.00409EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
added 2024/08/25 12:00 a.m.10 views

PT-2024-38839 · Unknown · Sourcecodester Qr Code Bookmark System

Name of the Vulnerable Software and Affected Versions: SourceCodester QR Code Bookmark System version 1.0 Description: A vulnerability was found in the SourceCodester QR Code Bookmark System, affecting the file /endpoint/add-bookmark.php of the component Parameter Handler. The manipulation of the...

5.4CVSS4.3AI score0.00402EPSS
SaveExploits1References15
CNNVD
CNNVD
added 2024/08/25 12:00 a.m.8 views

QR Code Bookmark System 跨站脚本漏洞

QR Code Bookmark System is a QR code bookmark system for rems individual developers. A cross-site scripting vulnerability exists in SourceCodester QR Code Bookmark System version 1.0, which originates from a cross-site scripting vulnerability in the tblbookmarkid/name/url parameter of the...

5.4CVSS4.8AI score0.00409EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/08/25 12:00 a.m.11 views

QR Code Bookmark System 跨站脚本漏洞

QR Code Bookmark System is a QR Code Bookmark System by rems Personal Developer. A cross-site scripting vulnerability exists in version 1.0 of the QR Code Bookmark System, which is caused by a cross-site scripting vulnerability in the name/url parameter of the /endpoint/add-bookmark.php file...

5.4CVSS4.6AI score0.00402EPSS
SaveExploits1References6
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2024/08/23 6:23 a.m.18 views

Minor update (5) for Vivaldi Android Browser 6.8

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the fourth 6.8 stable, minor update: Chromium Backport...

9.6CVSS5.8AI score0.20713EPSS
SaveExploits2References1
CVE
CVE
added 2024/07/26 8:36 a.m.87 views

CVE-2024-25090

Apache Roller is affected by a cross-site scripting (XSS) vulnerability due to insufficient input validation and sanitation in Profile name & screenname, Bookmark name & description, and blogroll name fields across versions 5.0.0 to 6.1.2. The issue can be exploited by an authenticated user to pe...

5.4CVSS5.9AI score0.00752EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/07/26 8:36 a.m.43 views

CVE-2024-25090 Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode

Insufficient input validation and sanitation in Profile name & screenname, Bookmark name & description and blogroll name features in all versions of Apache Roller on all platforms allows an authenticated user to perform an XSS attack. Mitigation: if you do not have Roller configured for untrusted...

0.00752EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/07/26 12:00 a.m.8 views

PT-2024-5531 · Apache · Apache Roller

Name of the Vulnerable Software and Affected Versions: Apache Roller versions 5.0.0 through 6.1.2 Description: The issue is caused by insufficient input validation and sanitation in features such as Profile name & screenname, Bookmark name & description, and blogroll name. This allows an...

5.4CVSS5.4AI score0.00752EPSS
SaveExploits0References9
OSV
OSV
added 2024/07/21 12:01 p.m.12 views

OPENSUSE-SU-2024:0206-1 Security update for cockpit

This update for cockpit fixes the following issues: - new version 320: pam-ssh-add: Fix insecure killing of session ssh-agent boo1226040, CVE-2024-6126 - changes in older versions: Storage: Btrfs snapshots Podman: Add image pull action Files: Bookmark support webserver: System user changes Metric...

3.2CVSS3.5AI score0.00268EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/07/11 3:15 a.m.5 views

Malicious code in sap-bookmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 006cf595c27f1836eda2b7310fe4ccb2d335997b79d431786210d980a379dde2 The OpenSSF Package Analysis project identified 'sap-bookmark' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/07/11 3:15 a.m.13 views

MAL-2024-7683 Malicious code in sap-bookmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 006cf595c27f1836eda2b7310fe4ccb2d335997b79d431786210d980a379dde2 The OpenSSF Package Analysis project identified 'sap-bookmark' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

7.3AI score
SaveExploits0
NVD
NVD
added 2024/05/21 1:15 p.m.24 views

CVE-2024-35361

MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user rights...

9.8CVSS8AI score0.00512EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/21 12:17 p.m.47 views

CVE-2024-35361

MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user rights...

8AI score0.00512EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/21 12:17 p.m.14 views

CVE-2024-35361

MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user rights...

8.3AI score0.00512EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/21 12:00 a.m.7 views

MTab Bookmark 安全漏洞

MTab Bookmark is a clean cut powerful navigation site from MTab Inc. MTab Bookmark is a simple and powerful navigation site from MTab, which allows you to quickly add your favorite websites to your bookmarks. A security vulnerability exists in MTab Bookmark version 1.9.5, which originates from a...

9.8CVSS8.2AI score0.00512EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/05/21 12:00 a.m.8 views

PT-2024-26460 · Unknown · Mtab Bookmark

Name of the Vulnerable Software and Affected Versions: MTab Bookmark version 1.9.5 Description: The issue is related to an SQL injection vulnerability in the /LinkStore/getIcon API endpoint. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user...

9.8CVSS8AI score0.00512EPSS
SaveExploits0References7
OSV
OSV
added 2024/05/03 3:16 a.m.5 views

CVE-2023-51553

Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

3.3CVSS4.9AI score0.00391EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.4 views

CVE-2023-51553

Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

3.3CVSS4.9AI score0.00391EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/05/03 3:16 a.m.33 views

CVE-2023-51553

Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

3.3CVSS5.3AI score0.00391EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:14 a.m.107 views

CVE-2023-51553

CVE-2023-51553 : Foxit PDF Reader/Editor is affected by an Out-of-Bounds Read in the Bookmark handling, caused by improper validation of bookmark data. This can lead to disclosure of sensitive information and, in conjunction with other vulnerabilities, may enable arbitrary code execution in the c...

3.3CVSS3.3AI score0.00391EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder