Lucene search
+L

317 matches found

Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•11 views

PT-2024-36015

Name of the Vulnerable Software and Affected Versions: Skylark App for Android versions 6.2.13 and earlier Skylark App for iOS versions 6.2.13 and earlier Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing an attacker to lead the applicati...

3.6CVSS5.3AI score0.00205EPSS
SaveExploits0References6
NVD
NVD
•added 2024/11/19 5:15 p.m.•43 views

CVE-2024-51930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IronFeet Custom URL Shortener custom-url-shorter allows Stored XSS.This issue affects Custom URL Shortener: from n/a through = 0.3.6...

6.5CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:30 p.m.•14 views

CVE-2024-51930 WordPress Custom URL Shortener plugin <= 0.3.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jie Wang Custom URL Shortener allows Stored XSS.This issue affects Custom URL Shortener: from n/a through 0.3.6...

6.5CVSS8.4AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:30 p.m.•36 views

CVE-2024-51930 WordPress Custom URL Shortener plugin <= 0.3.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IronFeet Custom URL Shortener custom-url-shorter allows Stored XSS.This issue affects Custom URL Shortener: from n/a through = 0.3.6...

6.5CVSS0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:30 p.m.•77 views

CVE-2024-51930

CVE-2024-51930 affects the WordPress plugin Custom URL Shortener, specifically versions

6.5CVSS8.4AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•27 views

WordPress plugin Custom URL Shortener: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS8.1AI score0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•8 views

CVE-2024-51930: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IronFeet Custom URL Shortener custom-url-shorter allows Stored XSS.This issue affects Custom URL Shortener: from n/a through = 0.3.6...

6.5CVSS8.5AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/11 8:15 p.m.•27 views

CVE-2024-51486

Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScrip...

8.4CVSS0.00528EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2024/11/11 8:15 p.m.•25 views

UBUNTU-CVE-2024-51490

Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. Thi...

9CVSS5.8AI score0.00544EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/11/11 7:44 p.m.•22 views

CVE-2024-51486 Stored Cross-Site Scripting in Ampache

Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScrip...

5.5CVSS5.9AI score0.00528EPSS
SaveExploits1References1
Mend
Mend
•added 2024/11/11 7:44 p.m.•11 views

CVE-2024-51486

Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScrip...

8.4CVSS5.9AI score0.00528EPSS
SaveExploits1References3
CVE
CVE
•added 2024/11/11 7:44 p.m.•76 views

CVE-2024-51486

Ampache (web-based audio/video streaming app and file manager) has a Stored Cross-Site Scripting vulnerability in the interface menu’s Custom URL - Favicon field. The input is not properly sanitized, allowing JavaScript execution. The issue is mitigated by upgrading to version 7.0.1, which is the...

8.4CVSS5.9AI score0.00528EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/11 7:35 p.m.•17 views

CVE-2024-51490 Stored Cross-Site Scripting in Ampache

Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. Thi...

5.5CVSS5.8AI score0.00544EPSS
SaveExploits1References1
Mend
Mend
•added 2024/11/11 7:35 p.m.•19 views

CVE-2024-51490

Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. Thi...

9CVSS5.8AI score0.00544EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/11 12:00 a.m.•6 views

CVE-2024-51486: Improper Neutralization of Input During Web Page Generation

Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This section is not properly sanitized, allowing for the input of strings that can execute JavaScrip...

8.4CVSS5.9AI score0.00528EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/11 12:00 a.m.•18 views

Ampache cross-site scripting vulnerability

Ampache is an open source web-based audio/video application and file manager from Ampache. A cross-site scripting vulnerability exists in Ampache version 7.0.1, which originates from a user being able to change the Custom URL - Favicon in the interface section of the Ampache menu...

8.4CVSS5.5AI score0.00528EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/11/11 12:00 a.m.•12 views

PT-2024-34650

Name of the Vulnerable Software and Affected Versions Ampache versions prior to 7.0.1 Description Ampache is a web-based audio/video streaming application and file manager. The issue exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This secti...

8.4CVSS5.9AI score0.00528EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/11/11 12:00 a.m.•23 views

Ampache cross-site scripting vulnerability

Ampache is an open source web-based audio/video application and file manager from Ampache. A cross-site scripting vulnerability exists in Ampache version 7.0.1, which originates from a user being able to change the Custom URL - Logo in the interface section of the Ampache menu...

9CVSS5.5AI score0.00544EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/11 12:00 a.m.•13 views

CVE-2024-51490: Improper Neutralization of Input During Web Page Generation

Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings that can execute JavaScript. Thi...

9CVSS5.8AI score0.00544EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/11 12:00 a.m.•14 views

PT-2024-34655

Name of the Vulnerable Software and Affected Versions Ampache versions prior to 7.0.1 Description The issue exists in the interface section of the Ampache menu, specifically where users can change the "Custom URL - Logo". This section is not properly sanitized, allowing for the input of strings...

9CVSS5.9AI score0.00544EPSS
SaveExploits1References9
Rows per page
Query Builder