Lucene search
+L

1606 matches found

Cvelist
Cvelist
added 2025/11/06 3:55 p.m.19 views

CVE-2025-62049 WordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerability

Missing Authorization vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder.This issue affects Cost Calculator Builder: from n/a through = 3.5.32...

6.5CVSS0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:54 p.m.2 views

CVE-2025-60196 WordPress Clearblue® Ovulation Calculator plugin <= 1.2.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Clearblue Clearblue® Ovulation Calculator clearblue-ovulation-calculator allows PHP Local File Inclusion.This issue affects Clearblue® Ovulation Calculator: from n/a through =...

7.5CVSS6.7AI score0.0042EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/06 3:54 p.m.12 views

CVE-2025-60196 WordPress Clearblue® Ovulation Calculator plugin <= 1.2.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Clearblue Clearblue® Ovulation Calculator clearblue-ovulation-calculator allows PHP Local File Inclusion.This issue affects Clearblue® Ovulation Calculator: from n/a through =...

7.5CVSS0.0042EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/06 3:54 p.m.12 views

CVE-2025-60196

CVE-2025-60196 affects the WordPress plugin “Clearblue Ovulation Calculator”

7.5CVSS6.7AI score0.0042EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.7 views

WordPress plugin Cost Calculator Builder 安全漏洞

WordPress Cost Calculator Builder plugin is a tool for creating cost calculators that supports multiple styles and features for e-commerce, quotation and other scenarios. WordPress Cost Calculator Builder plugin suffers from a missing authorization vulnerability that can be exploited by attackers...

6.5CVSS6.5AI score0.00293EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.5 views

PT-2025-45269

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Clearblue Clearblue® Ovulation Calculator clearblue-ovulation-calculator allows PHP Local File Inclusion.This issue affects Clearblue® Ovulation Calculator: from n/a through =...

7.5CVSS7.1AI score0.0042EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.8 views

PT-2025-45313

Missing Authorization vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder.This issue affects Cost Calculator Builder: from n/a through = 3.5.32...

6.5CVSS7AI score0.00293EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.5 views

WordPress plugin Clearblue Ovulation Calculator 安全漏洞

PHP, etc. are products of PHP. PHP is a scripting language that executes on the server side. webSockets ws, etc. are products of WebSockets open source. ws is a Node.js WebSocket library. r infrastructure gh, etc. are R infrastructure open source gh is a GitHub API library. A security vulnerabili...

7.5CVSS6.5AI score0.0042EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.10 views

CVE-2023-7319

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS6.2AI score0.00477EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.8 views

CVE-2025-34278

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.4CVSS5.7AI score0.00705EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/31 12:30 a.m.8 views

EUVD-2025-37215

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.1CVSS5.2AI score0.00705EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/30 10:15 p.m.7 views

CVE-2025-34278

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.4CVSS5.6AI score0.00705EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/30 10:15 p.m.14 views

CVE-2025-34278

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.4CVSS0.00705EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/30 10:15 p.m.7 views

CVE-2023-7319

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS0.00477EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/30 10:15 p.m.6 views

CVE-2023-7319

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS5.9AI score0.00477EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/30 9:28 p.m.9 views

CVE-2023-7319 Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS0.00477EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/30 9:28 p.m.3 views

CVE-2023-7319 Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu

Nagios Network Analyzer versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Percentile Calculator menu. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.8AI score0.00477EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/30 9:28 p.m.11 views

CVE-2023-7319

Nagios Network Analyzer versions prior to 2024R1 are affected by a cross-site scripting (XSS) vulnerability in the Percentile Calculator menu. The root cause is insufficient validation or escaping of user-supplied input, which can allow an attacker to inject and execute arbitrary script in a vict...

5.4CVSS5.8AI score0.00477EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 9:28 p.m.4 views

CVE-2025-34278 Nagios Network Analyzer < 2024R1 Source Groups / Percentile Calculator Menu Stored XSS

Nagios Network Analyzer versions prior to 2024R1 contain a stored cross-site scripting XSS vulnerability in the Source Groups page percentile calculator menu. An attacker can supply a malicious payload which is stored by the application and later rendered in the context of other users. When a...

5.1CVSS5.3AI score0.00705EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/30 9:28 p.m.16 views

CVE-2025-34278

CVE-2025-34278 affects Nagios Network Analyzer (versions prior to 2024R1). The issue is a stored XSS in the Source Groups page (percentile calculator menu) where an attacker-supplied payload is stored and later rendered in other users’ browsers, executing in the victim’s context. The redhat/europ...

5.4CVSS5.3AI score0.00705EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder