Lucene search
+L

15423 matches found

NVD
NVD
•added 2024/11/19 5:15 p.m.•28 views

CVE-2024-51935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

6.5CVSS0.00241EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•18 views

CVE-2024-51835

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ajinkyanahar OpenCart Product Display opencart-product-display allows Stored XSS.This issue affects OpenCart Product Display: from n/a through = 1.0...

6.5CVSS0.0039EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:30 p.m.•14 views

CVE-2024-51935 WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

6.5CVSS7.2AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:30 p.m.•41 views

CVE-2024-51935 WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

6.5CVSS0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:30 p.m.•77 views

CVE-2024-51935

CVE-2024-51935 is a DOM-based XSS in the WordPress plugin Fast Video and Image Display (

6.5CVSS7.2AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•11 views

PT-2024-34962 · Opencart · Opencart Product Display

Name of the Vulnerable Software and Affected Versions: Ajinkya N OpenCart Product Display versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious script...

6.5CVSS5.9AI score0.0039EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•7 views

CVE-2024-51935: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•18 views

PT-2024-35068 · Unknown · Fast Video/Image Display

Name of the Vulnerable Software and Affected Versions: Fast Video and Image Display versions n/a through 2.5.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

6.5CVSS6.8AI score0.00241EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•21 views

WordPress plugin Fast Video and Image Display has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS7.6AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•13 views

WordPress plugin for OpenCart – Product Display: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.5CVSS7.4AI score0.0039EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•7 views

CVE-2024-51835: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ajinkyanahar OpenCart Product Display opencart-product-display allows Stored XSS.This issue affects OpenCart Product Display: from n/a through = 1.0...

6.5CVSS5.8AI score0.0039EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2024/11/18 6:33 p.m.•31 views

CLSA-2024-1731933167 kernel: Fix of 36 CVEs

smb: client: fix use-after-free in smb2queryinfocompound CVE-2023-52751 - smb: client: prevent new fids from being removed by laundromat CVE-2023-52751 - cifs: fix dentry lookups in directory handle cache CVE-2023-52751 - uprobe: avoid out-of-bounds memory access of fetching args CVE-2024-50067 -...

9.8CVSS7AI score0.01369EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/11/18 1:37 a.m.•25 views

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as...

7.8CVSS7.4AI score0.00903EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/11/18 1:37 a.m.•20 views

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

7.8CVSS7.4AI score0.00903EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•10 views

CVE-2024-11306: Improper Authorization

A vulnerability, which was classified as critical, has been found in Altenergy Power Control Software up to 20241108. This issue affects some unknown processing of the file /index.php/display/database/. The manipulation leads to improper authorization. The attack may be initiated remotely. The...

6.9CVSS5.3AI score0.00548EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/18 12:00 a.m.•20 views

Linux DRM AMD Display Kernel DoS

The vulnerability of DRM/AMD/display components in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00279EPSS
SaveExploits0References47Affected Software5
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•65 views

Altenergy Power System Control Software injection vulnerability

Altenergy Power System Control Software is microinverter control software from Altenergy Power System. An injection vulnerability exists in Altenergy Power Control Software 20241108 and prior versions that stems from an improper authorization issue in the file /index.php/display/database/...

6.9CVSS5.8AI score0.00548EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/11/18 12:00 a.m.•22 views

Linux DRM AMD Display Kernel DoS

The vulnerability of components related to DRM, AMD, and display in the Linux operating system is associated with a memory corruption in the dpdscclockenread function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00309EPSS
SaveExploits0References40Affected Software5
Fedora
Fedora
•added 2024/11/16 2:02 a.m.•21 views

[SECURITY] Fedora 40 Update: ghostscript-10.02.1-13.fc40

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

8.4CVSS7.3AI score0.00546EPSS
SaveExploits0
NVD
NVD
•added 2024/11/15 4:15 p.m.•51 views

CVE-2024-50355

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can edit the Display Name of a device, the application did not properly sanitize the user input in the device Display Name, if java script code is inside the name of the device Display Name, its can b...

4.8CVSS0.00323EPSS
SaveExploits1References2
Rows per page
Query Builder