Lucene search
+L

2932 matches found

CNNVD
CNNVD
added 2022/05/06 12:0 a.m.8 views

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

4.8CVSS4.9AI score0.00543EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/05/06 12:0 a.m.7 views

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. WordPress plugin Countdown & Clock 2.3.2 and previous versions have a cross-site scripting vulnerability, which can be exploited by attackers to perform cross-site scripting attacks...

6.1CVSS5.9AI score0.00727EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/28 12:59 p.m.5 views

CVE-2022-29423

Pro Features Lock Bypass vulnerability in Countdown & Clock plugin = 2.3.2 at WordPress...

9.8CVSS8.6AI score0.01034EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/28 11:45 a.m.8 views

CVE-2022-29422

Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width;, &ycd-progress-height;, &ycd-progress-width;, &ycd-button-margin-top;, &ycd-button-margin-right;, &ycd-button-margin-bottom;,...

4.8CVSS5.1AI score0.00543EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/28 10:50 a.m.4 views

CVE-2022-29420

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

5.9CVSS5.9AI score0.00419EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.24 views

WordPress Countdown & Clock plugin <= 2.4.7 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities discovered by Ex.Mi in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

4.8CVSS3.2AI score0.00543EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.39 views

WordPress Countdown & Clock plugin <= 2.4.7 - Pro Features Lock Bypass vulnerability

Pro Features Lock Bypass vulnerability discovered by Ex.Mi Patchstack in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

9.8CVSS3.5AI score0.01034EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.26 views

WordPress Countdown & Clock plugin <= 2.4.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jeong Wonjun aka Pongchi Patchstack Alliance in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

5.9CVSS3.6AI score0.00419EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.29 views

WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ex.Mi Patchstack in WordPress Countdown & Clock plugin versions = 2.3.2. Solution Update the WordPress Countdown & Clock plugin to the latest available version at least 2.3.3...

6.1CVSS3AI score0.00727EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/04/24 9:49 p.m.18 views

GSD-2022-1001861 ptp: unregister virtual clocks when unregistering physical clock.

ptp: unregister virtual clocks when unregistering physical clock. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

7AI score
SaveExploits0
OSV
OSV
added 2022/04/24 8:56 p.m.8 views

GSD-2022-1001236 ptp: unregister virtual clocks when unregistering physical clock.

ptp: unregister virtual clocks when unregistering physical clock. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

7AI score
SaveExploits0
OSV
OSV
added 2022/04/24 8:51 p.m.11 views

GSD-2022-1001181 clk: qcom: clk-rcg2: Update logic to calculate D value for RCG

clk: qcom: clk-rcg2: Update logic to calculate D value for RCG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/04/24 8:35 p.m.12 views

GSD-2022-1000961 ep93xx: clock: Fix UAF in ep93xx_clk_register_gate()

ep93xx: clock: Fix UAF in ep93xxclkregistergate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/04/04 3:48 p.m.11 views

SUSE-SU-2022:1103-1 Security update for util-linux

This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. bsc1194642 - Prevent root owning of /var/lib/libuuid/clock.txt. bsc1194642 - Warn if uuidd lock state is not usable. bsc1194642...

5.5CVSS6.1AI score0.00661EPSS
SaveExploits1References26
Citrix
Citrix
added 2022/03/24 12:0 a.m.10 views

VDA not registered with the cloud connector Clock sync error

The VDA logon server reaching to different Geo Domain controller...

7.1AI score
SaveExploits0
wpexploit
wpexploit
added 2022/02/21 12:0 a.m.115 views

Countdown & Clock < 2.2.9 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. https://example.com/wp-admin/post-new.php?posttype=ycdcountdown&post="...

6.1CVSS1AI score0.00863EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2022/02/21 12:0 a.m.28 views

WordPress Countdown & Clock plugin <= 2.2.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ran Crane in WordPress Countdown & Clock plugin versions = 2.2.8. Solution Update the WordPress Countdown & Clock plugin to the latest available version at least 2.2.9...

6.1CVSS3.1AI score0.00863EPSS
SaveExploits2References3Affected Software1
Microsoft KB
Microsoft KB
added 2022/02/15 12:0 a.m.7 views

February 15, 2022—KB5010414 (OS Build 22000.527) Preview

None None...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.8 views

PT-2025-8036

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the clk: mediatek component. The problem occurs due to insufficient handling of error branches, resulting in...

5.5CVSS5.8AI score0.00261EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.12 views

PT-2025-37624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the rtc subsystem, specifically within the msc313 rtc probe function. A function prototype mismatch exists when calling clk disable unprepare, which...

5.5CVSS6AI score0.00143EPSS
SaveExploits0References20
Rows per page
Query Builder