Lucene search
+L

539 matches found

UbuntuCve
UbuntuCve
•added 2023/11/07 5:15 a.m.•35 views

CVE-2023-46998

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert, confirm, prompt functions...

6.1CVSS6.9AI score0.01435EPSS
SaveExploits2References3
Prion
Prion
•added 2023/11/07 5:15 a.m.•23 views

Cross site scripting

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert, confirm, prompt functions...

5.8CVSS7.3AI score0.01435EPSS
SaveExploits2References2Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/11/07 5:15 a.m.•12 views

UBUNTU-CVE-2023-46998

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert, confirm, prompt functions...

6.1CVSS6.2AI score0.01435EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/07 12:00 a.m.•3 views

CVE-2023-46998: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert, confirm, prompt functions...

6.1CVSS7.2AI score0.01435EPSS
SaveExploits2References2
Mend
Mend
•added 2023/11/07 12:00 a.m.•9 views

CVE-2023-46998

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert, confirm, prompt functions...

6.1CVSS0.01435EPSS
SaveExploits2References7
osv_cve
osv_cve
•added 2023/11/07 12:00 a.m.•42 views

CVE-2023-46998

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert, confirm, prompt functions...

6.3AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2023/11/07 12:00 a.m.•50 views

CVE-2023-46998

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert, confirm, prompt functions...

6.1CVSS6.3AI score0.01435EPSS
SaveExploits2
osv_cve
osv_cve
•added 2023/10/12 3:15 p.m.•16 views

CVE-2023-32124

Cross-Site Request Forgery CSRF vulnerability in Arul Prasad J Publish Confirm Message plugin = 1.3.1 versions...

8.8CVSS7.3AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/12 3:15 p.m.•18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Arul Prasad J Publish Confirm Message plugin = 1.3.1 versions...

6.8CVSS8.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/12 2:22 p.m.•46 views

CVE-2023-32124 WordPress Publish Confirm Message Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Arul Prasad J Publish Confirm Message plugin = 1.3.1 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/12 2:22 p.m.•71 views

CVE-2023-32124

The CVE-2023-32124 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Publish Confirm Message (author: Arul Prasad J) affecting versions

8.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•16 views

WordPress Plugin Publish Confirm Message Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.7AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/12 12:00 a.m.•4 views

PT-2023-23631

Name of the Vulnerable Software and Affected Versions Arul Prasad J Publish Confirm Message plugin versions prior to 1.3.1 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/12 12:00 a.m.•8 views

CVE-2023-32124: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Arul Prasad J Publish Confirm Message plugin = 1.3.1 versions...

8.8CVSS7.9AI score0.00256EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/10/05 6:15 p.m.•20 views

CVE-2023-5423

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely...

9.8CVSS5.8AI score0.00482EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/05 12:00 a.m.•7 views

PT-2023-32095

Name of the Vulnerable Software and Affected Versions SourceCodester Online Pizza Ordering System version 1.0 Description A critical vulnerability has been found in the SourceCodester Online Pizza Ordering System. This issue affects the file /admin/ajax.php?action=confirm order and is related to...

9.8CVSS5.5AI score0.00482EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/08/28 12:00 a.m.•25 views

PT-2023-27056 · Unknown · Tvcmsvideotab

Name of the Vulnerable Software and Affected Versions: theme volty tvcmsvideotab versions up to 4.0.0 Description: The issue is a SQL injection vulnerability. It occurs via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run. Recommendations: For versions up to 4.0.0, as a temporar...

9.8CVSS9.6AI score0.0062EPSS
SaveExploits0References7
Packet Storm
Packet Storm
•added 2023/07/10 12:00 a.m.•147 views

XOO DIGITAL 2.1.0 Cross Site Scripting

==================================================================================================================================== | Title : XOO DIGITAL v2.1.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 68.032-bit | | Vendor :...

7.1AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2023/06/02 5:15 p.m.•67 views

CVE-2023-25749

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. This bug only affects Firefox for Android. Other version...

4.3CVSS6.8AI score0.00384EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2023/05/09 10:04 a.m.•17 views

kernel: netfilter: conntrack: fix using __this_cpu_add in preemptible

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix using thiscpuadd in preemptible Currently in nfconntrackhashcheckinsert, when it fails in nfctextvalidpre/post, NFCTSTATINC will be called in the preemptible context, a call trace can be triggered: BUG:...

5.5CVSS5.9AI score0.00205EPSS
SaveExploits0References5
Rows per page
Query Builder