Lucene search
+L

28 matches found

CNNVD
CNNVD
added 2025/10/30 12:00 a.m.13 views

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI CCM versions prior to version 3.1.1 and Nagios XI version 5.8....

5.4CVSS6AI score0.00416EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/07 4:15 p.m.13 views

CVE-2022-50529

In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, the memory pointed by testfwconfig-name is not released. The memory leak information is as follows: unreferenced object...

5.5CVSS0.00156EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 3:19 p.m.12 views

EUVD-2025-32834

In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, the memory pointed by testfwconfig-name is not released. The memory leak information is as follows: unreferenced object...

5.8AI score0.00156EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/10/07 12:00 a.m.9 views

PT-2025-41034

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the test firmware init function. Specifically, when misc register fails during initialization, the memory pointed to by test fw config-name is...

6.3AI score0.00156EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2022/04/18 6:15 p.m.6 views

CVE-2022-0994

The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.5AI score0.02793EPSS
SaveExploits4References2
OSV
OSV
added 2022/04/18 6:15 p.m.11 views

CVE-2022-0994

The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.02793EPSS
SaveExploits4References1
Cvelist
Cvelist
added 2022/04/18 5:10 p.m.57 views

CVE-2022-0994 Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting

The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

5.2AI score0.02793EPSS
SaveExploits4References1
Packet Storm
Packet Storm
added 2022/04/07 12:00 a.m.297 views

WordPress Hummingbird Cross Site Scripting

Tittle: WordPress Plugin Hummingbird Configs edit the "Name and Description" and put the following payload in the Name field: Save and Click 'Apply' to trigger the XSS Go to Hummingbird's Settings Configs and Upload the following config "id": 1, "name": "", "description": "Xss", "config":...

5.2AI score0.02793EPSS
SaveExploits4
Rows per page
Query Builder