Lucene search
+L

476 matches found

CNNVD
CNNVD
added 2021/11/23 12:0 a.m.7 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Video Lessons Manager, which stems from a...

4.8CVSS5.1AI score0.00598EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/11/23 12:0 a.m.9 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress BetterLinks suffers from a cross-site scripting vulnerability that stems from a lack of...

5.4CVSS5.6AI score0.00604EPSS
SaveExploits2References2
Prion
Prion
added 2021/11/19 4:15 p.m.27 views

Sql injection

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In...

9CVSS9.1AI score0.09509EPSS
SaveExploits3References2Affected Software1
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.8 views

PHP 跨站脚本漏洞

PHP is a scripting language that executes on the server side. PHP suffers from a security vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS5.9AI score0.01635EPSS
SaveExploits4References5
CNNVD
CNNVD
added 2021/11/02 12:0 a.m.11 views

vaadin 跨站脚本漏洞

vaadin vaadin is an open source platform for web application development from Finnish company vaadin. the vaadin platform consists of a set of web components, a Java web framework, and a set of tools and application launchers. the vaadin platform includes a set of web components, a Java web...

6.1CVSS6.1AI score0.00955EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/10/25 12:0 a.m.7 views

Nextcloud 代码问题漏洞

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. nextcloud Contacts application prior to version 4.0.3 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side...

6.4CVSS5.6AI score0.00504EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/22 12:0 a.m.12 views

Csdn App 跨站脚本漏洞

Csdn App is an It community software for cell phones from CN Beijing Innovative Lezhi Network Technology Csdn. Csdn APP suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data by the WEB application. An attacker can exploit this vulnerability...

6.1CVSS6.1AI score0.00606EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/21 12:0 a.m.9 views

Alfresco 跨站脚本漏洞

Alfresco is an open source enterprise content management system. The platform page using Freemarker development , the main features include document management , collaboration , records management , knowledge base management , Web content management and so on. Alfresco has a security vulnerabilit...

5.4CVSS5.8AI score0.00534EPSS
SaveExploits0References3
NVD
NVD
added 2021/10/20 7:15 a.m.25 views

CVE-2021-30291

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

8.4CVSS0.00154EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/20 7:15 a.m.19 views

Memory corruption

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

7.2CVSS7.5AI score0.00154EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/20 7:15 a.m.25 views

Memory corruption

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

7.2CVSS7.5AI score0.00154EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/20 7:15 a.m.5 views

CVE-2021-30291

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

8.4CVSS7AI score0.00154EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/10/20 6:31 a.m.34 views

CVE-2021-30292

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

8.4CVSS8.8AI score0.00154EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/10/20 6:31 a.m.35 views

CVE-2021-30291

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

8.4CVSS8.8AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/14 12:0 a.m.7 views

Ericsson Network Manager 跨站脚本漏洞

Ericsson Network Manager is a network manager from Ericsson, Sweden. It covers monitoring, troubleshooting, configuration, automation and optimization of networks. Ericsson Network Manager suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-si...

6.1CVSS6.1AI score0.00601EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/10/11 12:0 a.m.5 views

ProjectSend 跨站脚本漏洞

Projectsend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. Projectsend suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to...

5.4CVSS5.7AI score0.00644EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.12 views

WordPress 插件 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Better Find and Replace plugin suffers from...

6.1CVSS5.4AI score0.00827EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.8 views

多款Qualcomm产品缓冲区错误漏洞

Qualcomm MSM8996AU and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The MSM8996AU is a central processing unit CPU product.The QCA6574AU is a central processing unit CPU product.The SD 636 is a central processing unit CPU product. A security vulnerability exists in Qualcomm that...

8.4CVSS7.3AI score0.00154EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.11 views

XssHunter-Express 授权问题漏洞

XssHunter-Express is used to test and find blind XSS. XssHunter-Express suffers from an Authorization Problem vulnerability that stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

9.8CVSS8.4AI score0.01762EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.11 views

Beego 跨站脚本漏洞

Beego is an open source web framework based on the Go language. Beego 2.0.1 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

6.1CVSS6.1AI score0.00795EPSS
SaveExploits1References3
Rows per page
Query Builder