Lucene search
+L

471 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/13 12:00 a.m.•4 views

CVE-2023-47657: Improper Neutralization of Input During Web Page Generation

Auth. ShopManager+ Stored Cross-Site Scripting XSS vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin = 1.5.8 versions...

5.9CVSS5.6AI score0.00394EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/09/30 12:00 a.m.•13 views

PT-2023-9164 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop Buy Addons baproductzoommagnifier module versions 1.0.16 and before Description: The issue is related to a lack of protection against SQL structure attacks in the BaproductzoommagnifierZoomModuleFrontController::run method of the...

10CVSS9.8AI score0.00748EPSS
SaveExploits1References4
Apple
Apple
•added 2023/09/21 12:00 a.m.•287 views

About the security content of macOS Ventura 13.6

About the security content of macOS Ventura 13.6 This document describes the security content of macOS Ventura 13.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

7.8CVSS7.8AI score0.1338EPSS
SaveExploits0References1Affected Software1
Apple
Apple
•added 2023/09/21 12:00 a.m.•87 views

About the security content of macOS Monterey 12.7

About the security content of macOS Monterey 12.7 This document describes the security content of macOS Monterey 12.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

7.8CVSS7.4AI score0.09515EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/21 12:00 a.m.•9 views

PT-2023-8421 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7 macOS versions prior to 13.6 macOS versions prior to 14 iOS versions prior to 16.7 iOS versions prior to 17 iPadOS versions prior to 16.7 iPadOS versions prior to 17 Description: The issue is related to insufficie...

3.3CVSS3.2AI score0.00212EPSS
SaveExploits0References13
Apple
Apple
•added 2023/09/21 12:00 a.m.•269 views

About the security content of iOS 16.7 and iPadOS 16.7

About the security content of iOS 16.7 and iPadOS 16.7 This document describes the security content of iOS 16.7 and iPadOS 16.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

8.8CVSS8.1AI score0.24349EPSS
SaveExploits3References1Affected Software2
HackRead
HackRead
•added 2023/09/11 1:19 p.m.•24 views

Crypto Bot Trading: What It Is and Successful Strategies

By Owais Sultan Crypto bot trading is the use of automated software to buy and sell cryptocurrencies. These bots are programmed… This is a post from HackRead.com Read the original post: Crypto Bot Trading: What It Is and Successful Strategies...

6.9AI score
SaveExploits0
OSV
OSV
•added 2023/08/28 2:15 p.m.•14 views

CVE-2023-39708

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

6.1CVSS5.9AI score0.0064EPSS
SaveExploits1References3
NVD
NVD
•added 2023/08/28 2:15 p.m.•32 views

CVE-2023-39708

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

6.1CVSS5.9AI score0.0064EPSS
SaveExploits1References3
Prion
Prion
•added 2023/08/28 2:15 p.m.•25 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

5.8CVSS5.9AI score0.0064EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/28 12:00 a.m.•17 views

CVE-2023-39708

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

5.6AI score0.0064EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/08/28 12:00 a.m.•16 views

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free and Open Source Inventory Management System v1.0 that could allow an attacker to execute arbitrary web script or HTML by injecting a crafted payload into the Ad...

6.1CVSS6.6AI score0.0064EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/28 12:00 a.m.•3 views

CVE-2023-39708: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

6.1CVSS6.6AI score0.0064EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/08/28 12:00 a.m.•43 views

CVE-2023-39708

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

6AI score0.0064EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
•added 2023/08/26 10:51 a.m.•15 views

buy-japan.eu Cross Site Scripting vulnerability OBB-3618777

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/08/25 10:47 a.m.•38 views

Navigating Legacy Infrastructure: A CISO's Actionable Strategy for Success

Every company has some level of tech debt. Unless you're a brand new start-up, you most likely have a patchwork of solutions that have been implemented throughout the years, often under various leadership teams with different priorities and goals. As those technologies age, they can leave your...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/08/06 6:13 a.m.•10 views

buyhousespayhere.com Cross Site Scripting vulnerability OBB-3569787

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/08/06 5:56 a.m.•22 views

buy-idaho-now.com Cross Site Scripting vulnerability OBB-3569762

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
NVD
NVD
•added 2023/08/05 11:15 p.m.•45 views

CVE-2023-36678

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin = 3.5.5 versions...

5.9CVSS5.3AI score0.00396EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/05 10:46 p.m.•88 views

CVE-2023-36678

CVE-2023-36678 affects the WordPress plugin WP Content Copy Protection & No Right Click up to version 3.5.5. It is an authenticated Stored XSS vulnerability (admin+ required) through the plugin, with low impact to confidentiality/integrity and no impact to availability per the cited sources. A fi...

5.9CVSS5.1AI score0.00396EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder