Lucene search
+L

642 matches found

Cvelist
Cvelist
added 2024/05/03 2:14 a.m.44 views

CVE-2023-51553 Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

3.3CVSS6AI score0.00391EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/02 9:15 a.m.8 views

CVE-2024-3883

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and...

5.4CVSS5.9AI score0.00323EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/05/02 2:37 a.m.7 views

WordPress 3D FlipBook plugin <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL vulnerability

Authenticated Author+ Stored Cross-Site Scritping via Bookmark URL vulnerability discovered by Tim Coen in WordPress Plugin 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery versions = 1.15.4...

6.4CVSS6.3AI score0.00323EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/02 12:00 a.m.15 views

PT-2024-28236 · WordPress · 3D Flipbook

Name of the Vulnerable Software and Affected Versions: 3D FlipBook plugin for WordPress versions up to, and including, 1.15.4 Description: The issue is related to Stored Cross-Site Scripting via the Bookmark URL field due to insufficient input sanitization and output escaping. This allows...

6.4CVSS5.8AI score0.00323EPSS
SaveExploits0References8
NVD
NVD
added 2024/04/18 10:15 a.m.28 views

CVE-2024-32577

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeboxr Team CBX Bookmark & Favorite cbxwpbookmark allows Stored XSS.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.20...

6.5CVSS6.4AI score0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/18 9:33 a.m.29 views

CVE-2024-32577 WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeboxr Team CBX Bookmark & Favorite cbxwpbookmark allows Stored XSS.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.20...

6.5CVSS5.2AI score0.0032EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/18 9:33 a.m.29 views

CVE-2024-32577 WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeboxr Team CBX Bookmark & Favorite cbxwpbookmark allows Stored XSS.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.20...

6.5CVSS6.6AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/18 12:00 a.m.13 views

PT-2024-24698 · Unknown · Cbx Bookmark & Favorite

Name of the Vulnerable Software and Affected Versions: CBX Bookmark & Favorite versions 1.7.20 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

6.5CVSS5.8AI score0.0032EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/04/16 2:48 p.m.10 views

WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin CBX Bookmark & Favorite versions = 1.7.20...

6.5CVSS6.1AI score0.0032EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/16 12:00 a.m.18 views

WordPress CBX Bookmark & Favorite Plugin <= 1.7.20 is vulnerable to Cross Site Scripting (XSS)

Software CBX Bookmark & Favorite Type Plugin Vulnerable versions = 1.7.20 Fixed in 1.7.22 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32577 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c797afa81115 Credits LVT-tholv2k Required privile...

6.5CVSS6.6AI score0.0032EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/04/15 4:15 p.m.9 views

CVE-2024-3797

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bookmark.php?bookmark=1. The manipulation of the argument bookmark leads to sql injection. The attack can be initiated...

9.8CVSS5.7AI score0.00822EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/15 4:15 p.m.32 views

CVE-2024-3797

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bookmark.php?bookmark=1. The manipulation of the argument bookmark leads to sql injection. The attack can be initiated...

9.8CVSS6.9AI score0.00822EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/04/15 4:00 p.m.13 views

CVE-2024-3797 SourceCodester QR Code Bookmark System sql injection

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bookmark.php?bookmark=1. The manipulation of the argument bookmark leads to sql injection. The attack can be initiated...

6.5CVSS7.6AI score0.00822EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/04/15 4:00 p.m.37 views

CVE-2024-3797 SourceCodester QR Code Bookmark System sql injection

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bookmark.php?bookmark=1. The manipulation of the argument bookmark leads to sql injection. The attack can be initiated...

6.5CVSS7.2AI score0.00822EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/15 8:15 a.m.34 views

CVE-2024-32132

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Codeboxr Team CBX Bookmark & Favorite.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.20...

7.6CVSS7.9AI score0.00515EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 7:34 a.m.22 views

CVE-2024-32132 WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Codeboxr Team CBX Bookmark & Favorite.This issue affects CBX Bookmark & Favorite: from n/a through 1.7.20...

7.6CVSS7.6AI score0.00515EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/15 7:34 a.m.76 views

CVE-2024-32132

CVE-2024-32132: CBX Bookmark & Favorite (WordPress plugin CBXWPBookmark) is affected by an SQL Injection vulnerability up to version 1.7.20. The connected Wordfence entry labels it as an Authenticated (Administrator+) SQL Injection, indicating exploitation requires an authenticated admin+ user; n...

7.6CVSS5.6AI score0.00515EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/15 12:00 a.m.8 views

SourceCodester QR Code Bookmark System 安全漏洞

QR Code Bookmark System is a QR code bookmark system by rems individual developer. A security vulnerability exists in SourceCodester QR Code Bookmark System version 1.0, which stems from a SQL injection caused by the parameter bookmark in the file /endpoint/delete-bookmark.php?bookmark=1...

9.8CVSS7.2AI score0.00822EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/04/15 12:00 a.m.13 views

PT-2024-27869 · Sourcecodester · Sourcecodester Qr Code Bookmark System

Name of the Vulnerable Software and Affected Versions: SourceCodester QR Code Bookmark System version 1.0 Description: A critical issue has been found in the system, affecting the file /endpoint/delete-bookmark.php?bookmark=1. The manipulation of the bookmark argument leads to SQL injection. This...

9.8CVSS7.2AI score0.00822EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/04/15 12:00 a.m.12 views

PT-2024-24427 · Unknown · Cbx Bookmark & Favorite

Name of the Vulnerable Software and Affected Versions: CBX Bookmark & Favorite versions 1.7.20 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

7.6CVSS7.8AI score0.00515EPSS
SaveExploits0References4
Rows per page
Query Builder