Lucene search
+L

867 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:59 a.m.•21 views

CVE-2023-51508

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Database Cleaner: Clean, Optimize & Repair.This issue affects Database Cleaner: Clean, Optimize & Repair: from n/a through 0.9.8...

7.5CVSS7.8AI score0.0048EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:37 a.m.•20 views

CVE-2023-35781

Cross-Site Request Forgery CSRF vulnerability in LWS Cleaner plugin = 2.3.0 versions...

8.8CVSS8AI score0.00248EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:23 a.m.•20 views

CVE-2022-46813

Cross-Site Request Forgery CSRF vulnerability in Younes JFR. Advanced Database Cleaner plugin = 3.1.1 versions...

8.8CVSS8.3AI score0.00256EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 11:43 p.m.•16 views

CVE-2022-2173

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.00788EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:05 p.m.•17 views

CVE-2021-24921

The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $GET keys and values before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:04 p.m.•18 views

CVE-2021-24141

Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users admin+ to perform SQL attacks...

7.2CVSS7.1AI score0.01205EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:42 p.m.•21 views

CVE-2020-8508

nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled...

9.8CVSS8.6AI score0.01719EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/05/21 2:10 p.m.•7 views

Malicious code in db-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a72cd0c1c8572d55b42f5b29e3ba12562254d45caf82e25ebe93583f35e9af68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/05/21 2:10 p.m.•5 views

Malware in db-cleaner

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/05/21 2:10 p.m.•8 views

MAL-2025-4075 Malicious code in db-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a72cd0c1c8572d55b42f5b29e3ba12562254d45caf82e25ebe93583f35e9af68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/05/14 12:00 a.m.•20 views

Alibaba Cloud Linux 3 : 0152: python-lxml (ALINUX3-SA-2023:0152)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0152 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-43818: lxml is a library for processing XM...

8.2CVSS6.5AI score0.02663EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2025/04/07 12:00 a.m.•18 views

Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the...

4.4CVSS6.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/07 12:00 a.m.•6 views

PT-2025-15287

Name of the Vulnerable Software and Affected Versions: Trend Micro Cleaner One Pro affected versions not specified Description: The issue is related to a Denial-of-Service vulnerability in the link following functionality. Recommendations: At the moment, there is no information about a newer...

5.5AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/03 9:39 p.m.•20 views

CVE-2025-31446

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jiangmiao WP Cleaner wpcleaner allows Reflected XSS.This issue affects WP Cleaner: from n/a through = 1.1.5...

7.1CVSS7.2AI score0.00393EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2025/04/02 3:31 p.m.•2 views

org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.596.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...

4.3CVSS6.1AI score0.00399EPSS
SaveExploits0
NVD
NVD
•added 2025/04/01 9:15 p.m.•17 views

CVE-2025-31446

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jiangmiao WP Cleaner wpcleaner allows Reflected XSS.This issue affects WP Cleaner: from n/a through = 1.1.5...

7.1CVSS0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 8:58 p.m.•37 views

CVE-2025-31446 WordPress WP Cleaner plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jiangmiao WP Cleaner wpcleaner allows Reflected XSS.This issue affects WP Cleaner: from n/a through = 1.1.5...

7.1CVSS0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 8:58 p.m.•14 views

CVE-2025-31446 WordPress WP Cleaner plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jiangmiao WP Cleaner allows Reflected XSS. This issue affects WP Cleaner: from n/a through 1.1.5...

7.1CVSS8.4AI score0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 8:58 p.m.•94 views

CVE-2025-31446

CVE-2025-31446 : A reflected XSS in the WordPress plugin WP Cleaner (versions up to 1.1.5) arises from improper input neutralization during page generation. Public technical details are limited in the provided documents; no patch/mitigation details are available. Monitor for updates from the vend...

7.1CVSS8.4AI score0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•20 views

WordPress plugin WP Cleaner has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS7.7AI score0.00393EPSS
SaveExploits0References2
Rows per page
Query Builder