Lucene search
+L

5920 matches found

CNVD
CNVD
added 2021/11/13 12:0 a.m.20 views

WordPress Appointment Booking Calendar System Plugin Cross-Site Scripting Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Appointment Booking Calendar System...

6.1CVSS1.2AI score0.01243EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/12 4:15 p.m.24 views

CVE-2021-38972

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly...

4.3CVSS0.0061EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/12 4:15 p.m.20 views

Input validation

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly...

4CVSS4.5AI score0.0061EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2021/11/12 12:0 a.m.7 views

Advanced Micro Devices SNP 输入验证错误漏洞

Advanced Micro Devices SNP AMD SNP is a firmware from AMD Advanced Micro Devices, Inc.. The Advanced Micro Devices SNP suffers from an input validation error vulnerability that arises from a networked system or product that does not properly validate incoming data...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/11/12 12:0 a.m.7 views

Advanced Micro Devices SNP 输入验证错误漏洞

Advanced Micro Devices SNP AMD SNP is a firmware from AMD Advanced Micro Devices, Inc.. The Advanced Micro Devices SNP Firmware suffers from an input validation error vulnerability that arises from a networked system or product that does not properly validate incoming data...

5.5CVSS5.8AI score0.00233EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/11/11 12:0 a.m.12 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to insufficient input data validation. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to insufficient validation of input data. Exploiting these vulnerabilities can allow unauthorized actors to gain...

8.5CVSS6.6AI score0.07818EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2021/11/10 12:0 a.m.36 views

WordPress AddToAny Share Buttons Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress AddToAny Share Buttons plugin in versions prior t...

4.8CVSS4.8AI score0.00654EPSS
SaveExploits2References1
CNVD
CNVD
added 2021/11/10 12:0 a.m.20 views

WordPress Booking.com Product Helper Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Booking.com Product Helper plugin in version 1.0....

4.8CVSS4.8AI score0.00598EPSS
SaveExploits2References1
CNVD
CNVD
added 2021/11/10 12:0 a.m.23 views

WordPress Booking.com Banner Creator Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Booking.com Banner Creator plugin in version 1.4....

4.8CVSS4.9AI score0.00598EPSS
SaveExploits2References1
CNVD
CNVD
added 2021/11/10 12:0 a.m.22 views

WordPress Translate WordPress-Google Language Translator plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. Translate WordPress-Google Language Translator prior to version 6.0.12 suffers from a cross-site scripting vulnerability, which...

4.8CVSS2.1AI score0.00654EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.8 views

Appointment Booking Calendar System 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Appointment Booking Calendar System...

6.1CVSS5.7AI score0.01243EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.6 views

TYPO3 跨站脚本漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland.TYPO3 has a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output, which can be exploited by an attacker with TYP...

5.4CVSS5.6AI score0.00493EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/11/10 12:0 a.m.26 views

WordPress Unlimited PopUps Plugin SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Unlimited PopUps plugin in version 4.5.3 and earlier suffers from a SQL injection vulnerability that...

8.8CVSS8.9AI score0.01517EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.9 views

The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems allows a perpetrator to cause service failures.

The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.04777EPSS
SaveExploits0References3
Prion
Prion
added 2021/11/09 5:15 p.m.11 views

Input validation

NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a CA can choose the RRDP repository it wishes to publish its data in. By continuously generating a new child CA that only consists of anoth...

5CVSS7.4AI score0.01434EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.7 views

CASAP Automated Enrollment 跨站脚本漏洞

CASAP Automated Enrollment is an automated enrollment system organized by CASAP USA. The purpose of this project is to provide an automated enrollment system for CASAP to streamline the school process and make it more effective, efficient and easy to retrieve. SourceCodester CASAP Automated...

6.1CVSS6.1AI score0.00641EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.8 views

SourceCodester Tailor Management 跨站脚本漏洞

SourceCodester Tailor Management is an open source tailor management system software from the individual developer Warren Daloyan. A security vulnerability exists in SourceCodester Tailor Management, which stems from a lack of proper validation of client-side data in the web application. An...

6.1CVSS6.4AI score0.00641EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.6 views

WordPress 插件 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress AddToAny Share Buttons plugin in versions prior t...

4.8CVSS5.7AI score0.00654EPSS
SaveExploits2References3
CNVD
CNVD
added 2021/11/08 12:0 a.m.29 views

GNU C Library has unspecified vulnerabilities

The GNU C Library glibc, libc6 is an open source, free C compiler released under the LGPL license. version 2.34 of the GNU C Library aka glibc contains a security vulnerability that stems from a data validation issue in the affected version of the library, iconvdata/iso-2022-jp-3.c's iconv in the...

7.5CVSS4.1AI score0.03063EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.7 views

PHP 跨站脚本漏洞

PHP is a scripting language that executes on the server side. PHP suffers from a security vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS5.9AI score0.01635EPSS
SaveExploits4References5
Rows per page
Query Builder