Lucene search
+L

1427 matches found

OSV
OSV
•added 2024/11/22 11:07 a.m.•9 views

OESA-2024-2433 python-requests security update

Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work even method overrides to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. +...

4.3CVSS6.9AI score0.00393EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/22 11:07 a.m.•10 views

OESA-2024-2432 python-requests security update

Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work even method overrides to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. +...

4.3CVSS6.9AI score0.00393EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/22 11:07 a.m.•12 views

OESA-2024-2431 python-requests security update

Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work even method overrides to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. +...

4.3CVSS6.9AI score0.00393EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/19 5:15 p.m.•37 views

CVE-2024-51908

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kevinabl Adventure Bucket List adventure-bucket-list allows DOM-Based XSS.This issue affects Adventure Bucket List: from n/a through = 1.0.9...

6.5CVSS0.00325EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:31 p.m.•75 views

CVE-2024-51908

CVE-2024-51908 is a DOM-based XSS in the WordPress plugin Adventure Bucket List (WordPress plugin family). The vulnerability arises from improper input neutralization during page generation, enabling DOM-based cross-site scripting. Affected versions are reported as “from n/a through 1.0.9” for Ad...

6.5CVSS7.2AI score0.00325EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:31 p.m.•13 views

CVE-2024-51908 WordPress Adventure Bucket List plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gonzalo Geraldo Adventure Bucket List allows DOM-Based XSS.This issue affects Adventure Bucket List: from n/a through 1.0.9...

6.5CVSS6.9AI score0.00325EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:31 p.m.•47 views

CVE-2024-51908 WordPress Adventure Bucket List plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kevinabl Adventure Bucket List adventure-bucket-list allows DOM-Based XSS.This issue affects Adventure Bucket List: from n/a through = 1.0.9...

6.5CVSS0.00325EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•17 views

WordPress plugin Adventure Bucket List 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS7.6AI score0.00325EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•3 views

CVE-2024-51908: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kevinabl Adventure Bucket List adventure-bucket-list allows DOM-Based XSS.This issue affects Adventure Bucket List: from n/a through = 1.0.9...

6.5CVSS5.8AI score0.00325EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•18 views

PT-2024-35040 · Unknown · Gonzalo Geraldo Adventure Bucket List

Name of the Vulnerable Software and Affected Versions: Gonzalo Geraldo Adventure Bucket List versions 1.0.0 through 1.0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS, which can ...

6.5CVSS6.8AI score0.00325EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/11/15 4:08 a.m.•12 views

SUSE CVE-2024-1682

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external party. The use of this unclaimed S3 bucket could lead to data integrity issues, data leakage, availability problems, loss of...

4.3CVSS6.8AI score0.00393EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/11/15 12:00 a.m.•21 views

The vulnerability of the Microsoft Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Windows operating system’s Telephony Service is related to an overflow in the buffer in the “bucket”. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS6.2AI score0.01614EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/14 6:15 p.m.•20 views

CVE-2024-1682

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external party. The use of this unclaimed S3 bucket could lead to data integrity issues, data leakage, availability problems, loss of...

4.3CVSS0.00393EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/14 5:32 p.m.•57 views

CVE-2024-1682 Unclaimed S3 Bucket Reference in psf/requests Documentation

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external party. The use of this unclaimed S3 bucket could lead to data integrity issues, data leakage, availability problems, loss of...

4.3CVSS0.00393EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/11/14 5:32 p.m.•44 views

CVE-2024-1682 Unclaimed S3 Bucket Reference in psf/requests Documentation

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external party. The use of this unclaimed S3 bucket could lead to data integrity issues, data leakage, availability problems, loss of...

4.3CVSS7AI score0.00393EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/14 12:00 a.m.•11 views

PT-2024-18218

Name of the Vulnerable Software and Affected Versions Amazon S3 affected versions not specified Description The issue concerns an unclaimed Amazon S3 bucket, 'codeconf', referenced in an audio file link within a documentation file. This bucket has been claimed by an external party, which could le...

4.3CVSS4.7AI score0.00393EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2024/11/14 12:00 a.m.•25 views

Requests 安全漏洞

Requests is an elegant and simple HTTP library from the Python Foundation. With Requests, you can send HTTP / 1.1 requests very easily. There is no need to manually add query strings to your URLs or form-encode POST data. Requests has a security vulnerability that stems from referencing the...

4.3CVSS4.7AI score0.00393EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•2 views

CVE-2024-1682: Undefined Security Weakness

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external party. The use of this unclaimed S3 bucket could lead to data integrity issues, data leakage, availability problems, loss of...

4.3CVSS5.6AI score0.00393EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/09 11:15 a.m.•29 views

UBUNTU-CVE-2024-50259

In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminate the string in nsimnexthopbucketactivitywrite This was found by a static analyzer. We should not forget the trailing zero after copyfromuser if we will further do some string operations,...

5.5CVSS6.2AI score0.00219EPSS
SaveExploits0References34
Debian CVE
Debian CVE
•added 2024/11/09 10:15 a.m.•18 views

CVE-2024-50259

In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminate the string in nsimnexthopbucketactivitywrite This was found by a static analyzer. We should not forget the trailing zero after copyfromuser if we will further do some string operations,...

5.5CVSS5.7AI score0.00219EPSS
SaveExploits0
Rows per page
Query Builder